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GOOGLE REVS 
APP ENGINE AS 
FREE SERVICE 

BY ROBERT MULLINS 
AND DAVID WORTHINGTON 

In another bid to expand 
beyond its presence in search 
engine advertising, Google is 
launching a free Web applica- 
tion-hosting service. 

Google App Engine will allow 
software application developers 
to host their applications on 
Google's infrastructure and to 
scale resources as needed. The 
company made the preview 
release at last month s CampFire 
One developer event. 

The release is currently lim- 
ited to the first 10,000 develop- 
ers who sign up, and they will 
be restricted to using 500MB of 
storage. CPU and network 
bandwidth would be sufficient 
to support about 5 million page 
views per month for a typical 
continued on page 30 ► 




Yahoo defies Microsoft, 
seeks alternative bids 

Ballmer letter threatens to oust Yahoo's board 



BY DAVID WORTHINGTON 

In a sharply worded letter to 
Yahoo's board, Microsoft CEO 
Steve Ballmer last month threw 
down the gauntlet and threat- 
ened a hostile takeover. He 
explicitly warned against letting a 
three-week window for a friend- 
ly transaction to close. 

But Yahoo, playing a classic 
defensive strategy, may force 
Microsoft to open its wallet by 
striking deals with other Internet 
players. 

In the April 5 letter, Ballmer 
bemoaned the pace of negotia- 
tions since Microsoft made its 
US$44.6 billion proposal to 
acquire Yahoo at the end of Janu- 
ary. Yahoo's management, led by 
CEO Jerry Yang, has urged share- 



holders to reject the proposal, and 
Yahoo's board formally declined 
the offer on Feb. 11, saying that it 
undervalued the company. 

Meanwhile, Ballmer's chief 
complaints are the "limited inter- 
action" between the manage- 
ment of the companies since the 
offer and the lack of substantive 
progress toward a deal. 

"Now is the time for our 
respective companies to autho- 
rize teams to sit down and nego- 
tiate a definitive agreement on a 
combination of our companies," 
Ballmer wrote. He set a three- 
week deadline for that to hap- 
pen and threatened to initiate a 
proxy contest to elect an "an 
alternative slate of directors for 
the Yahoo board" if it did not 



come to the table. 

It is in Microsoft's best inter- 
est to wrap up the deal quickly, 
said Directions on Microsoft 
analyst Greg DeMichillie. The 
longer it takes to conclude, he 
said, the more Yahoo's best and 
brightest engineers will leave the 
company, adding that a friendly 
deal would allow Microsoft to 
more easily identify the elite 
among those who remain. 

Yahoo's board struck back at 
Ballmer's claims in a letter dated 
April 8. The board accused 
Ballmer of mischaracterizing the 
nature of its discussions with 
Microsoft and noted that the 
companies have had "construc- 
tive conversations" about inte- 
gration and regulatory issues. 



The letter asserted that 
Microsoft has failed to supply 
Yahoo with information it 
requested on March 28 about 
anti-trust and regulatory issues 
associated with the transaction. 

As for Ballmer's letter, it reit- 
erated Microsoft's position that it 
is offering "a premium" for 
Yahoo, one that is even more sig- 
nificant now, citing "public indi- 
cators" that suggest Yahoo's share 
of the Internet search market 
and overall page views have fall- 
en since January. 

In reality, Yahoo appears to be 
holding its own, not sinking. A 
March 26 market share report by 
Nielsen/NetRatings gave Yahoo a 
17.6% share of the U.S. search 
continued on page 32 ► 



Salesforce-Google deal buoys SaaS 
f /o 



BY ROBERT MULLINS 

In a deal that boosts the soft- 
ware-as-a-service model, 
Salesforce.com will gain 
access to Google Apps. 
Salesforce for Google 
Apps, as it's being 
called, will offer 
Google's multiple office 
productivity applica- 
tions integrated with 
Salesforce's customer 
Salesforce chairman and CEO Marc Benioff, left, relationship manage- 
with Google CEO Eric Schmidt. ment and other applica- 




tions, Salesforce said in a news 
release. Business customers can 
access those combined applica- 
tions using the Internet without 
any hardware or software to 
download, install or maintain. 

The partnership extends pre- 
vious collaborations between the 
two companies, said Google 
CEO Eric Schmidt, in a pre- 
pared statement: "Together, we 
are making more applications 
and services available online so 
continued on page 31 ► 










imbedded industry, 

tackle mult icore gap:., page 26 
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Multicore processors don't work as well as they could if the related 
software is written for a single-processor world. The Multicore As- 
sociation is releasing an API for writing multicore embedded appli- 
cations, while universities are developing curricula to teach multi- 
core programming to the next generation of developers. 
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Hacker overcame PCI standard in security breach 

Retailer was certified, but it didn't stop theft of card data 



BY JENNIFER DEJONG 

It's the same old story: Retailer 
gets hacked, thief gets away 
with the credit card data. But 
the latest security breach to 
make headlines adds a twist. 
The merchant that got hit was 
certified compliant with PCI 
DSS, the Payment Card Indus- 
try Data Security Standard 
designed to ward off such 
attacks. 

"They were compliant and 
they got hit anyway" Cenzic 
vice president of marketing 
Mandeep Khera said, referring 
to the Hannaford Bros, super- 
market chain of New England, 
which reported in March the 
theft of 4.2 million individual 
customer credit or debit card 
numbers. "PCI is a little bit of a 
sham. It gives [businesses] a 
certificate, which may or may 
not protect you," the consumer. 

SD Times asked application 
security toolmakers and other 
experts whether PCI DSS itself 
is under attack, in the wake of 
the breach of a certified retail- 
er. Their response: The stan- 
dard needs to be more specific 
when spelling out best practices 
for securing credit card data. 
Such guidelines as "Review cus- 
tom application code to identify 
coding vulnerabilities" are so 
broadly stated they are subject 
to interpretation, they asserted. 

But the experts also said that 
although it's important for the 
standard to keep evolving, 
pointing to the Hannaford 
breach as a failure of PCI is too 
simplistic. 

"Security is not a static 
thing," said Gary McGraw, 
chief technology officer for 
security consultancy Cigital. 
"You get certified at a certain 
point in time, but your posture 
has to [continually] change 
according to what is going on in 
the threat space." That means a 
retailer can be "compliant on 
Monday, and in violation on 
Tuesday," added Tom Mahoney, 
director of Merchant911.org, a 



Web site that publishes infor- 
mation meant to help online 
merchants prevent credit card 
fraud. 

If anything, the breach of a 
PCI-certified retailer helps 
application security providers 
and consultants bolster their 
own message that hasn't taken 
hold as rapidly as they would 
like: Writing, deploying, and 
maintaining secure applications 
demands a continuing effort 
that begins at the outset of the 
development process. That is 
an infinitely more complex 
undertaking than simple com- 
pliance with PCI DSS is, they 
admit. 

"PCI was not intended as 
the sole measure to ensure 
security," explained Jack 
Danahy, chief technology offi- 
cer for application security tool- 
maker Ounce Labs. "Han- 
naford's [embarrassment] helps 
organizations become more 
sensitized about this issue." 

HP security consultant Joey 
Peloquin said that PCI DSS is 
"a brilliant first attempt that a 
majority of merchants can 
adhere to. But what do they 
mean by 'review code'?" he 
wondered. "They don't say, 
'Hire a consultant to review 
code by hand. They don't say, 
'Run [an application security 
tool] to do that.' " 

It's a good step forward but 
it's vague, added Cenzic's 
Khera. "PCI DSS is so high-lev- 
el there is not much clarity." 

Cenzic sells application 
security tools; HP acquired its 
own line by purchasing SPI 
Dynamics last year. 

Glenn Boyet, director of 
marketing and communications 
for the PCI Security Standards 
Council, which manages PCI 
DSS, said an update to the cur- 
rent, version 1.1 is expected in 
September. Further details 
were not made available. The 
council is composed of payment 
card issuers American Express, 
Discover Financial Services, 



MasterCard Worldwide, Visa 
International and others. Pay- 
ment card issuers can fine mer- 
chants that fail to comply with 
the standard. Compliance is 
measured by Qualified Security 
Assessors, specified by the 
council. 

SPIRIT OF PCI 

The best way to interpret the 
standard — and thus ensure bet- 
ter protection of credit card 
data — is to follow the basic 
principles, rather than satisfy 
vague criteria, said Cigital's 
McGraw. "The spirit of the law 
says a company is committed to 
protecting customers' personal 
information. The letter of the 
law is a piece of paper that says 
you are compliant." 

But many retailers subject to 
PCI DSS focus only on the out- 
ward signs of compliance, said 



Cenzic's Khera. "If you ask 
them if they are worried about 
securing their Web applications 
completely, they say: 'No, we 
don't care about that right now. 
We are PCI DSS-compliant, so 
we won't be penalized by Visa 
and MasterCard.' " 

Although what's PCI compli- 
ant and what's not is, like any 
mandate, subject to interpreta- 
tion, most of the Qualified 
Security Assessors that conduct 
audits for the council do a good 
job, said Roger Thornton, chief 
technology officer and co- 
founder of application security 
tool maker Fortify. "They are 
relatively rigorous, relatively 
fair and relatively consistent," 
he said. McGraw didn't dis- 
agree, but he noted, "There is 
no accreditation board for the 
people doing the certifying. 
One firm says, 'Fine.' Another 



says 'Fix the following 18 
things.' " 

Still, PCC DSS specifies 
best practices for access con- 
trol, encryption, network secu- 
rity and secure coding, making 
it "far and away the most com- 
prehensive security standard," 
Thornton said. It's important to 
view it for what it is: a regulato- 
ry standard that offers guid- 
ance. "PCI has done a good job 
of that." 

Obviously, PCI cannot 
demand too much of merchants 
too fast, added Ounce Labs' 
Danahy. "This has to be an 
incremental approach to be 
successful. Version 1.0 raised 
awareness; 1.1 added practices 
to ensure secure coding. We 
expect [requirements] to be 
increased gradually. Doing it all 
at once would be insurmount- 
able for retailers." I 



WHAT WENT WRONG AT HANNAFORD? 



The supermarket chain that recently reported the theft of 4.2 million credit and deb- 
it card numbers isn't talking about how it happened, and the company did not respond 
to a request for an interview. But Brian Chess, chief scientist for application security 
tool provider Fortify, has a theory about what happened-and an explanation of how 
Hannaford Bros, could have met PCI requirements. Here's what he told SD Times: 




Brian Chess 



^ CC The uniformity of the 
— breach-the servers in 
almost all of the stores 
were compromised-makes 
it more likely that the 
attackers found a vulnera- 
bility in a piece of code 
that was common to all of 
the servers. If that's the 
case, it doesn't matter if 
there were 271 or thousands 
of servers, because the 
attackers could automate their exploit. My guess 
is that they first broke into the internal corporate 
network, then did some basic network scanning to 
identify all of the target servers, then figured out 
that ... all of the machines [were vulnerable]. 

There are a few reasons I think it's likely that 
the attack came from inside the corporate net- 
work. First, many organizations are much more 
lax about internal systems. Second, Hannaford 
had passed a PCI audit, but PCI takes a relaxed 



attitude toward internal machines. Take a look at 
PCI DSS section 6.6 [the section of the standard 
that addresses application security]: 

Ensure that all Web-facing applications are 
protected against known attacks by applying 
either of the following methods: 

• Having all custom application code reviewed 
for common vulnerabilities by an organiza- 
tion that specializes in application security. 

• Installing an application layer firewall in 
front of Web-facing applications. 

That means Hannaford fulfilled [the] PCI DSS 
section 6.6 reguirement by default, because its 
Web applications were for use only inside the 
corporate network. PCI DSS is a lot like a fire 
code or a health code. It doesn't guarantee 
smooth sailing; it just helps people avoid repeat- 
ing a lot of painful mistakes from the past. I will 
not be surprised if future versions of PCI DSS 
drop the distinction between Web-facing soft- 
ware and internal software.,?? 

-Jennifer deJong 
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Microsoft calls for HTML 5 carve-up 

Many working groups are better than one, the company says 



BY DAVID WORTHINGTON 

The ever-increasing intricacy of 
the World Wide Web is evi- 
denced by the character and 
scope of the HTML 5 draft 
specification. Microsoft wants 
to hasten HTML 5 s arrival, but 
its proposed solution may not 
sit well with all parties. 

In a recent interview, Inter- 
net Explorer platform architect 
Chris Wilson told SD Times 
that more progress could be 
made with teams working in 
parallel, and he recommended 
that portions of the HTML 5 
specification be broken off and 
assigned to new workgroups. 

That might not be as radical 
as it sounds, according to For- 
rester analyst Jeffrey Ham- 
mond, who believes that it 
makes sense to subdivide 
HTML 5 into smaller, more 
manageable pieces. "I can't 
even imagine how many years it 
will take browsers to implement 
it [HTML 5]." Hammond posit- 
ed, "How do you eat an ele- 
phant? One bite at a time." 

Wilson explained that sever- 
al pieces of HTML 5 would be 
equally useful outside of it, par- 
ticularly for Web applications 
and content. Those bits include 
such features as the Canvas 
APIs, which are used to render 






moving graphics; offline 
caching of Web applications' 
resources; persistent client-side 
data storage; and the peer-to- 
peer (P2P) networking connec- 
tion framework. 

Hammond noted that exam- 
ples of those technologies are 
already prospering outside of 
HTML, such as local storage in 
Google Gears, and to him, the 
popularity of technologies like 
Flash and Silverlight demon- 
strates that there is a demand 
for the Canvas APIs. "These 
two in particular make a lot of 
sense to me ... to split off from 
the larger specification and 
move [HTML 5] forward more 
rapidly," Hammond said. 

Larry O'Brien, an indepen- 
dent analyst and consultant who 



writes the Windows & .NET 
Watch column for SD Times, 
demurred, stating in an e-mail: 
"Canvas APIs define a resolu- 
tion-dependent bitmap area. 
While somewhat of a half-step 
in HTML 5 (in that they are 
limited to 2D), it seems to me 
that this is an area where 
greater integration with text- 
markup is probably called for." 

Microsoft's Wilson noted that 
development of the P2P frame- 
work would likely advance more 
slowly because of technical con- 
siderations, adding that working 
with the Canvas APIs would re- 
quire specialized experts. 

The work on the next-gener- 
ation Web protocol is ambitious 
indeed. New attribute and ele- 
ment tags will embed audio and 



video content and will simplify 
indexing by search engines, 
rendering on small-screen de- 
vices and using voice readers 
for the visually impaired. Some 
deprecated elements — center, 
front and strike — were dropped 
in favor of CSS, because it pro- 
vides the same functionality. 

HTML 5 has additional 
APIs for audio, graphics and 
video, and interactive docu- 
ment editing. 

In an attempt at flexibility, 
HTML 5 can be written using 
either an HTML or XML syntax, 
and the specification has precise 
rules for handling and recover- 
ing from syntax errors. HTML 4 
browsers can ignore HTML 5 
constructs, and existing HTML 
content remains usable. 

Hammond questioned why 
browser vendors should wait for 
full compliance before they 
allow people to take advantage 
of HTML 5s features. Web 
browsers including Firefox 3, 
Internet Explorer 8, Opera 9.5 
and Safari 3.1 already have 
begun to implement aspects of 
its language elements and 
offline storage capability. 

World Wide Web Consor- 
tium (W3C) spokesperson 
Michael Smith acknowledged 
that HTML's new functionality 



makes the specification large, 
and that a general agreement 
among most working group 
members exists that some parts 
of it would be better off as sub- 
specifications. 

However, he cautioned that 
it was not a simple task to 
define the core set of APIs that 
should be together and what 
should be separated out; dele- 
gating that decision could lead 
to those essential APIs getting 
out of sync with HTML. 

Smith pointed to the Docu- 
ment Object Model (DOM), 
which was a separate specifica- 
tion prior to its implementation 
in HTML 5, both as an example 
of that de synchronization and 
as a specification that is useful 
outside of HTML. 

So for now, nothing changes 
as far as the W3C goes. Smith 
noted that while modularization 
of specification is a good idea in 
principle, the consortium needs 
a commitment from one or 
more member organizations to 
take over a part of the specifica- 
tion. "We don't have that; no- 
body has stepped up," he said. 

When asked for a commit- 
ment, Microsoft's Wilson said 
that the company was willing to 
step up but observed that the 
task of an editorship is tough. I 



Its work done, component group dissolves 



BY DAVID WORTHINGTON 

Components are popular today, 
but the idea took a while to 
catch on. Ten years ago, the 
assumption was that "real 
developers" didn't buy compo- 
nents. The component market 
has since grown fiercely com- 
petitive, leading to the demise 
of one industry trade group. 

May will see the formal dis- 
solution of the Component Ven- 
dor Consortium. Founded in 
1999 as a nonprofit organization, 
CVC was established to advo- 
cate component usage, facilitate 
intravendor testing and compat- 
ibility, and implement compo- 
nent quality standards. 

Its final president, Sax.net 
president and founder Mike 
Sax, said that CVC had 
achieved "many times over" its 
primary mission of doubling the 
size of the component market. 

In essence, he said, CVC 



had become a group in search 
of a mission. "It did not make 
sense to keep the organization 
around. We decided to no 
longer have a formal organiza- 
tion and instead continue to do 
work individually." 

Microsoft was an early part- 
ner in CVC, but its decision to 
focus on its own partner pro- 
gram also contributed to the 
organization's demise. Sax 
explained that Microsoft hesi- 
tated to start a component part- 
ner program, but soon recog- 
nized the value of the com- 
ponent market and wanted to 
bring the program in-house. 

But it wasn't a hostile move, 
Sax said, noting that Microsoft 
continued to support the CVC 
financially through co-market- 
ing and member benefits. 

"Although the organization's 
budget was reduced, the 
increased visibility and commit- 



ment (with internal resources) to 
components on Microsoft's part 
was very beneficial for the CVC's 
member companies," said Sax in 
a later discussion by e-mail. 

Component makers now fall 
under Microsoft's Visual Studio 
Industry Partners (VSIP) pro- 
gram and the Microsoft Com- 
ponent Builders Program. 
Microsoft's liaison to CVC, 
VSIP program director Joe 
Marini, the director of 
Microsoft's Development Tools 
Partner Ecosystem, said that 
while Microsoft does not tailor 
the program to any one sub- 
group of the program for logis- 
tical reasons, the company has 
given component vendors a 
specific section in the Visual 
Studio Gallery and set aside 
time for component makers to 
engage the audience at 
TechEd. "We don't really do 
that for many categories of 



VSIP members," he said. 

Atalasoft president Bill 
Bither said that CVC had been 
a "really big help" to Atalasoft, 
allowing it to advertise more 
effectively. For example, its first 
ad in SD Times was placed 
through CVC. "We would have 
liked to have seen it continue. 
VSIP doesn't exactly suit com- 
ponent vendors," he lamented. 

Software FX president Rene 
Garcia agreed with Bither's VSIP 
assessment. "Unfortunately, a 
vendor-centric program such as 
Microsoft's VSIP Program is not 
the right forum for component 
vendors to discuss and deal with 
important issues that affect our 
community and our customers," 
he noted in an e-mail. 

Garcia noted that while the 
VSIP program is useful, it is just 
an official information channel 
from Microsoft to its partners. 
The range of partners in the pro- 




Mike Sax: Time to replace formal 
organization with individual work. 

gram results in an untargeted 
message that is not tailored to 
component makers, he said. 

The idea of promoting com- 
ponents for components' sake 
has also taken a back seat under 
Microsoft's leadership, it seems. 
Garcia believes that it comes 
down to those vendors that 
continued on page 24 ► 



COMPLETE YOUR DATA 
VISUALIZATION AND 
REPORTING TOOLBOX 

B^ing a deeper is about making things 
work, pulling together requirements and 
architecting sofutions. This can mean 
eying components to gel her to access 
and present data, completing business 
functions, or integrating disparate sys- 
tem s, For many, creating compelling 
visual modefs and engaging reports is a 
tedious process thai only makes the job 
that much harder. It -might no: be so batf 
if end user requirements were static, but 
unfortunately, thai 1 5 not always the case, 
Successful amplication developers gain 
that status, in part, bacaus^ th^y arre a bin 
to answer the problem of data presenta- 
tion and the challenge of changing user 
requirements. 

For more than a deuade Business Ob- 
jects, an SAP company, has been helping 
developers solve these problems. Now 
they ana making data presentation solu- 
tions more accessible by providing one of 
th© world's most popular reporting toofs 
and their Jatesl dashboard technology 
bundled together at one low price- The 
Crystal Reports® 2000 Visual Advantage 
bundle indudes: Crystal Reports 200B, 
a standard reporting solution for many 
organisations, and Kcelsius 1 ® 1 2008, a 
leading point and click dashboard tool, 
at a suggested list price of $995 USD (a 
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Xcelsiu^ 2 DO 8 is a Flash-based tool that 
enables developers and users of different 
$kil| levels to create rich, engaging dash- 
boards within a point-and -click design 
environment. With ready to use visual 
components, gauges and maps develop- 
ers can quickly create dashboards that 
combine data from multiple data sources 
with scenario analysis and what-if model- 
ing. The final dashboard is compiled into 
an SWF file which can then be called 
from .NET and Java™" applications or 
integrated into Microsoft Office, PDR and 
corporate portals. 
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For over 1 5 years developers have been 
embedding Crystal Reports into web 
and windows applications creating high.y 
formatted reports from virtually any data 
source. Crystal Reports 200 B makes 
reports easier to consume and generate . 
With new interactivity features like report 
reformatting and on-repdrt sorting and 
filtering, one report can now serve many 
individuals and answer multiple questions. 
With the ability to now embed multi- media 
Rash™ and Flex™, application developers 
can create mash-ups between Xcetsius 
and Crystal Reports that make the data 
more consumable and understandabie for 
the user. 

Embedded Xc^lsius models can also 
leverage Cryslal Reports data connectiv- 
ity using the report as a data source and 
dynamfcally update the dashboard model. 

Thrg enables Crystal Reports users to 
look beyond today's data and analyze 
what the future could bring. 

Find out more about the CryslaJ Reports 
2008 Visual Advantage bundle with 
Crystal Reports and Xcelseus, at: 
www.bus i nesso bjects.com/C Rvis 
or call :1 889 333-6007. 

Business Objects 

an SAP" company 
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Telerik ships ASP.NET component suite 



BY DAVID WORTHINGTON 

In antiquity, Prometheus 
brought fire to mankind. Telerik 
hopes to catch some of that 
spark with its latest ASP.NET- 
based component suite. 



Last month, Telerik shipped ing and is built using Microsoft's been overhauled for this 



RadControls for ASP.NET 
AJAX, formerly code-named 
"Prometheus." The suite en- 
compasses RadControls for 
WinForms and Telerik Report- 



ASP.NET AJAX platform. 

Chief technical evangelist 
Todd Anglin wrote in a blog 
entry that Telerik's RadGrid- 
View WinForms control has 



release. Two new controls, Rad- 
Carousel and RadForm, have 
debuted, and the suite comes 
with several demo applications. 
Telerik Reporting, a tool for 
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ASP.NET and WinForms view- 
ers, has an integrated designer 
for Visual Studio with updated 
layout support. Also included is a 
user interface for accepting run- 
time user-supplied parameters 
and the option to export to RTF. 

The company also announced 
a community technology preview 
of RadControls for WPF, its first 
foray into the Windows Presenta- 
tion Framework component 
market. The initial release bun- 
dled a carousel and grid control. 

In a discussion with SD 
Times, Anglin said that a suite of 
Silverlight controls would follow 
the WPF preview. He expects 
Telerik to ship both suites 
before the end of the year. 

Telerik has separate teams 
dedicated to Silverlight and 
WPF. Anglin noted that though 
there is overlap between the 
technologies, Telerik would opti- 
mize controls for each platform. I 

Mobility at core 
of BizTalk RFID 

BY DAVID WORTHINGTON 

Rusiness processes are often 
visualized as an assembly line, 
but that assumption falls apart 
when RFID enters the picture, 
since these tags are often on the 
move. Microsoft is updating 
RizTalk to accommodate the 
requirements of business pro- 
cess where mobility matters. 

On April 17, Microsoft 
unveiled a beta version of Mi- 
crosoft RizTalk RFID Mobile at 
RFID Journal LIVE 2008 in 
Las Vegas. The company 
expects the final version of 
RizTalk RFID Mobile to ship 
toward the end of the year. 

Steve Sloan, lead product 
manager of Microsoft's con- 
nected systems division, said 
that RizTalk RFID Mobile will 
address challenges specific to 
the technology by managing 
RFID devices and connectivity 
to back-end systems. 

"It creates a layer for part- 
ners to build applications on top 
of [without worrying] about the 
complexity of managing readers 
and the mix of devices from 
manufacturers," he added. 

RizTalk RFID Mobile runs 
on top of Windows CE and 
Windows Mobile 5.0 and com- 
municates back to RizTalk 2006 
R2 servers. 

Mobile RFID readers are 
used in a variety of scenarios, 
such as a pharmacist determin- 
ing whether the right medi- 
cines have been stocked. I 
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The latest evolution of the most comprehensive suite of 
Internet communications components for professional 
developers is here! 



The highly anticipated |P*Works! Version 8*0 release represents a leap forward Eh 
design, performance r and new functionality! With more than 40+ components 
supporting every major Internet protocol and development technology, it is easy to 
see why lP*Works! is the professional developers #1 choice for connected 
application development. 
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Scrum requires big change but delivers results 



Software Test & Performance Conference keynoter espouses agile development 



BY ROBERT MULLINS 

SAN MATEO, Calif. — A lead- 
ing evangelist for Scrum soft- 
ware development says that the 
method takes some getting used 



to, but it does its job: create a 
quality product with few bugs. 

"It's all about people, and a 
few bugs," said Robert 
Sabourin, president of software 



development consulting firm 
AmiBug.com, and keynote 
speaker at the Software Test & 
Performance Conference on 
April 16. 



Sabourin presented two case 
studies of the software develop- 
ment problems faced by his 
client companies, which he did 
not identify, and how Scrum 
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addressed those issues. 

Scrum is a form of agile soft- 
ware development that involves 
a closely linked team of devel- 
opers, testers and product 
managers incrementally devel- 
oping and testing software in an 
iterative process. The term 
comes from rugby, and it 
describes how play resumes 
with players from each team 
grappling for the ball. 

Scrum iterations, which typ- 
ically last between 15 and 30 
days each, are supposed to end 
with the creation of "shippable 
code," he said. 

WHY ONE PROJECT FAILED 

In one case study, a data pro- 
cessing company thought it 
would do a pilot project in 
Scrum to see how it might work, 
but shortchanged the project in 
many ways, Sabourin explained. 
Software development teams 
and testers were in different 
locations, the product "own- 
er" — the person in the company 
who would use the software — 
was not fully engaged in the 
project, and the development 
team was constantly being inter- 
rupted by IT support issues 
elsewhere in the company. The 
project also suffered from 
redundant bug tracking. 

"It was an inertia problem," 
Sabourin concluded. He rec- 
ommended that they choose a 
more important project as a 
pilot and treat it like a real pro- 
ject. He added that develop- 
ment and testing teams should 
be co-located and that the 
product owner should be fully 
engaged. What's more, redun- 
dant bug tracking should cease. 

In a second case study, an 
information management com- 
pany was bogged down with 
documentation that had 
slowed the development 
process. The company had sev- 
en levels of design documenta- 
tion that took three months to 
approve. Documentation was 
inconsistent and testing proce- 
dures were "heavily scripted," 
Sabourin said. 

The Scrum project that he 
recommended replaced docu- 
mentation with "storyboards" 
that explained more simply 
what the customer needed the 
software to do. Sabourin para- 
phrased John. F. Kennedy: "Ask 
not what your software does for 
users. Ask what your user does 
with your software." 

The Software Test & Perfor- 
mance Conference was pro- 
duced by BZ Media LLC, which 
also publishes SD Times. I 
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Microsoft will work with the Telefonica Foundation to 

promote technology education for teachers and stu- 
dents in Latin America. The foundation is tasked with 
carrying out the Spanish telecom giant's social and 
cultural action plans in Spain and the Americas and will team with 
Microsoft to expand an online network for providing content and ser- 
vices to help teachers learn about IT resources . . . IBM has awarded 
research grants to five universities that will enable them to use the 
company's Jazz platform for developing software in a collaborative 
environment. Schools in three countries received this second round of 
Jazz grants: Brown University, Carnegie Mellon University and North 
Carolina State University in the U.S.; the University of Calgary in Cana- 
da; and Saarland University in Germany. The grants are designed to 
help university students learn how to build software as a global team 
. . . Sun Microsystems has chosen the Oracle-led EclipseLink project 
as the reference implementation for a Java persistence API. 
EclipseLink is short for the Eclipse Persistence Services Project, which 
has developed a runtime framework that supports persistence stan- 
dards, allowing Java developers to interact with relational databases 
in creating Java EE or Java SE applications. 



NEW PRODUCTS 



_L 



Intel has unveiled a release candidate of its SOA Security Toolkit, 

which provides security for SOAs by using XML digital signatures and 
encrypting SOAP messages. Version 1.0 of the toolkit, available for Lin- 
ux and Windows, complies with WS-Security and SOAP standards. 
Users can provide their own XML policy file as an input . . . LogiXML 
has created the Logi ETL (Extract, Transform and Load) tool for inte- 
grating enterprise data into a consistent format to work with corpo- 
rate applications. Logi ETL is a Web-based data integration application 
that is data source-neutral and browser-independent, and it can trans- 
fer data from different sources to multiple destinations . . . Fortify has 
created Fortify 360, a suite of integrated secu- 
rity products that allows dynamic analysis of 
applications during quality assurance testing and real-time monitoring 
of applications after deployment. The product is part of the company's 
new security strategy, called "Business Software Assurance," that 
attempts to minimize business risks associated with software exploita- 
tion . . . IBM has created a social network for SOA, so that IT and 
business professionals can share best practices in a public forum. IBM 
said it has an SOA network of more than 120,000 architects and devel- 
opers and over 130 universities contributing to IBM's SOA "curricu- 
lum." The social network will host its virtual meetings in Second Life, 
an Internet-based virtual world. 



(FpRTIFY 



UPDATES 



Neotys, a provider of load testing tools for Web applications, has 
made available NeoLoad 2.4 with new modules that can integrate 
with Adobe Flex, Oracle Forms, and other rich Internet applications 
(RIAs). NeoLoad is stress-testing software for Web applications that 
doesn't require scripting, the company said. Now, it can also work 
with AJAX . . . EditGrid, an online spreadsheet company, has created 
a plug-in for the Atlassian Confluence enterprise wiki software. The 
■^^ itusuu plug-in lets licensed Confluence users 

*■"■"* LUNrLUCnLE view and edit spreadsheets on wikis, and 
it allows multiple users to edit spreadsheets simultaneously. The 
plug-in also can retrieve live financial data on the Web, and it includes 
a chat application. 
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PEOPLE 



Recognizing their technical prowess, 74 technical experts from IBM 
were appointed Distinguished Engineers, including IBM Rational's 
George DeCandio, Scott Rich and Leigh Williamson. DeCandio is 
credited with helping build VisualAge for C++ and IBM WebSphere Stu- 
dio, and Rich has contributed to various Rational products. Williamson 
was an architect of WebSphere. I 




Open XML captures ISO 
approval after bitter battle 

Microsoft vows to work toward interoperability 



BY DAVID WORTHINGTON 

After months of politicking by 
partisans for and against its 
acceptance, the fight is now 
over: Office Open XML 
(OOXML) has been certified 
as an ISO international stan- 
dard. Although some are skep- 
tical of the outcome, with 
claims made of chicanery and 
strong-arm tactics, the matter 
appears settled. 

The ISO confirmed last 
month that OOXML had 
gained sufficient support from 
ISO voting members and "P- 
members" that took part in the 
technical committee to reverse 
the results of last Septembers 
ballot rejecting its "fast track" 
standardization. 

National standards bodies 
were given 30 days to reconsid- 
er their votes after a Feb. 29 
ballot resolution meeting con- 
cluded without a consensus on 
how to modify the specification 
to satisfy objections registered 
in the September vote. 

Approval required that a 
minimum of two-thirds of votes 
cast by P-members were posi- 
tive and no more than one- 
quarter of the total national 
body votes were negative. 
Those criteria were met with 
75% of participating members 
voting to approve and only 14% 
of national member body votes 
voting against adoption as an 
international standard. 

On March 28, Denmark 
reversed its previous disapproval 
and decided to back the format. 



Croatia, Germany, Norway, the 
Philippines, Poland and the 
United Kingdom likewise moved 
to support its standardization. 

Other national standards 
bodies, including Australia, 
failed to take a position for or 
against its adoption. Australia 
maintained its "abstain" vote, 
citing a lack of consensus 
among its delegation. France 
shifted its vote from "no" to 
"abstain," which contributed to 
OOXMLs passage. 

The ISO has designated 
OOXML as ISO/IEC draft in- 
ternational standard 29500, and 
the ISO/IEC Joint Technical 
Committee 1 Subcommittee 
34, as the body responsible for 
document description and pro- 
cessing languages standards, 
will oversee 29500. 

The committee, which will 
meet this month in Oslo, Nor- 
way, assumed responsibility for 
OOXMLs evolution and main- 
tenance on April 9, wrote Brian 
Jones, Microsoft Office Pro- 
gram Manager, in a blog post- 
ing on that date. 

Tom Robertson, general 
manager of interoperability and 
standards at Microsoft, said that 
Microsoft intends to be an 
active participant in that 
process to "make sure that [the 
technical committee] is posi- 
tively contributing to the speci- 
fication so it's the right one at 
the end of the day for users and 
the industry." He said that 
Microsoft is committed to 
implementing ISO 29500. 



OOXMLs ratification was not 
without controversy, and not 
everyone agrees that it is right for 
the industry. Accusations of 
manipulation and strong-arm tac- 
tics piled up during the closing 
days of March; irregularities have 
been alleged in Germany, Nor- 
way and elsewhere, and there is 
an effort under way in Norway to 
reverse its OOXML vote. 

Steve Pepper, chairman of 
the Norwegian mirror commit- 
tee to the ISO, published a dec- 
laration informing interested 
parties of "serious irregularities" 
in connection with the Norwe- 
gian vote and called for an 
investigation by the Norwegian 
Ministry of Trade and Industry. 

In response, Norway's Stan- 
dard Norges, the group responsi- 
ble for the vote, issued a press 
release with a detailed explana- 
tion about its decision. Even 
without Norway's vote, OOXML 
would still meet the ISO require- 
ments, with 71.8% of the remain- 
ing P-members supporting it. 

'MISLEADING' REPORTS 

Perhaps to head off similar con- 
troversy, Germany's national 
standards body, the German 
Institute for Standardization, 
issued a statement saying that 
reports circulating on the Inter- 
net regarding its voting proce- 
dures were "false and mislead- 
ing." The reports claimed that 
the opposition was not seated in 
the meeting room during final 
deliberations. 

continued on page 25 ► 
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MySQL community sees growth potential under Sun 



BY ROBERT MULLINS 

Increased visibility for the 
MySQL open-source database 
management software is 
expected now that Sun 
Microsystems owns MySQL, 
Sun CEO Jonathan Schwartz 
said at the MySQL Conference 
& Expo April 15 in Santa Clara. 

Some in the audience 
agreed, while others are waiting 
to see what happens, and with 
the MySQL road map appar- 
ently remaining unchanged for 
now, both groups may turn out 
to be right. 

MySQL's prospects "will be 
better under Sun because we 
[will] have more resources to 
help do what we need to do," 
said Sheeri Cabral, team lead at 
enterprise database manage- 
ment service provider The Pythi- 
an Group. Cabral also received 
an award at the conference for 
promoting MySQL through 
events and other efforts. 

The process of integrating 
MySQL's 400 employees into 
Sun's 32,000-person workforce 
is continuing; the US$1 billion 
acquisition was completed on 
Feb. 26. 

MySQL has already reached 
12 million downloads, with an 
additional 60,000 per day, and 
the developers using the soft- 
ware all stand to benefit, said 
Marten Mickos, MySQL's for- 
mer CEO and now a Sun senior 
vice president. 

OPEN-SOURCE EDGE 

The new advantage lies in 
Sun's role as "the biggest pro- 
ponent of open source today," 
Mickos said. 

Software developers using 
MySQL can also employ Sun's 
GlassFish application server, its 
NetBeans development envi- 
ronment or OpenSolaris, the 
open-source version of its com- 
mercial Solaris operating sys- 
tem, he said. "But no one's 
pushing you," he added. 

For entrepreneurial MySQL 
users seeking to make a busi- 
ness out of their software devel- 
opment, they have a larger 
ecosystem, distribution channel 
and a quicker path to market for 
their ambitions, Mickos said. 

The implications of the 
acquisition are less evident to 
others, though. 

"We're waiting to see," said 
Donna Burke, vice president of 
marketing and product man- 
agement for Exadel, a provider 



of database access software and 
services and a conference 
exhibitor. 

"It's not evident to us what 
impact it will have," said Burke, 
who noted that in a meeting at 



the show, MySQL officials said 
the product roadmap would not 
see drastic changes right away. 
During the show, Sun intro- 
duced a prerelease candidate 
of MySQL 5.1 (see story, page 



23). A final version is slated for 
general availability by the end 
of June. 

Although Exadel supports 
MySQL for its customers, it 
also works with other database 



platforms, including Oracle, 
PostgreSQL and Sybase, ac- 
cording to Burke. 

Still, she said, the acquisi- 
tion "secures MySQL in the 
marketplace." I 
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Upgrade to Delphi PHP widens database support 



BY ROBERT MULLINS 

The Web is all about dynamic 
data these days, and developers 
using PHP have a new tool to 
consider for their use, one that 
offers new debugging features 



and "shake-and-bake" HTML 
templates. 

CodeGear released version 
2.0 of its Delphi for PHP devel- 
opment environment today, 
adding wider database support, 



an expanded Visual Component 
Library (VCL), a new debug- 
ging tool and other changes. 

Delphi for PHP 2.0 now sup- 
ports database programs from a 
number of vendors, including 



CodeGear's own InterBase, 
IBM's DB2 and Informix, 
Microsoft SQL Server, Oracle, 
PostgreSQL, Suns MySQL, and 
Sybase's Advanced Server and 
SQL Anywhere. It enables de- 
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velopers to create data-driven 
Web applications without re- 
quiring database connectivity 
coding, CodeGear said. 

The upgrade also adds 
HTML templates with embed- 
ded dynamic PHP so that PHP 
developers can more easily work 
with HTML developers. 

The expanded VCL supports 
popular PHP packages and 
libraries, including the Zend 
Framework. In addition to the 
new debugging tool, version 2.0 
offers integrated profiling and 
tuning features to improve 
application performance. 

Delphi for PHP 2.0 lists for 
what CodeGear called "a spe- 
cial introductory price" of 
US$249 through June 2008, 
while upgrades from Delphi for 
PHP 1.0 will cost $179. I 

SQL ANYWHERE 
PANORAMA 
PREVIEW ROLLS 

BY P.J. CONNOLLY 

Meeting the requirements of 
increasingly complex technolo- 
gy is the theme of the next 
release of Sybase iAnywhere's 
database management tools. 
SQL Anywhere 11, expected to 
ship by year's end, is now avail- 
able as a beta. 

Code-named "Panorama," 
SQL Anywhere 11 offers 
reworked parallel query capa- 
bilities for the latest multicore 
systems. Also included are 
embedded full-text search fea- 
tures to improve access to 
unstructured data on devices in 
the field and in the hands of 
"road warrior" executives. 

The data synchronization 
features of SQL Anywhere 11 
are updated with new failover 
and load-balancing capabilities, 
background synchronization, 
and the SQL Anywhere tools 
that now work with Sun's 
MySQL database. 

Also featured in the beta 
release is support for .NET and 
Perl-stored procedures, allow- 
ing the execution of database 
logic as written by an applica- 
tion programmer, and, by the 
company's count, more than 
196 other enhancements and 
new features. 

The beta is open to develop- 
ers, with registration on Sy- 
base's Web site. I 
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Office, SharePoint Server protocols documented 

Microsoft eyes June delivery of documentation for selected products 



BY DAVID WORTHINGTON 

A new wave of technical docu- 
mentation suggests that 
Microsoft is on track to deliver 
the first protocol documenta- 
tion for a selection of its high- 
volume products next month. 

The company has posted 
14,000 pages of preliminary 
documentation for essential 
Microsoft Office 2007 and 
SharePoint Server protocols on 
its MSDN site. Included in this 
wave is documentation for: 
•Protocols between SharePoint 
Server 2007 and Office client 
applications; 

•Protocols between SharePoint 
Server 2007 and other Microsoft 
server products; 

•Protocols between Exchange 
Server 2007 and Outlook; and 
•Protocols between Office 2007 
client applications and other 
Microsoft server products. 

Back in February, Microsoft 
had announced a major inter- 
operability initiative. In so 
doing, the company committed 
itself to publish by June the 
documentation for the APIs of 
the above products as well as 
others, including Exchange 
Server 2007, SQL Server 2008, 
Windows Server 2008, Win- 
dows Vista and all future releas- 
es of those products. What's 
more, Microsoft vowed to pro- 
vide documentation for proto- 
cols related to the .NET 
Framework within the same 
time frame. 

Access to the documentation 
of those protocols is free, but 
implementing them is another 
matter, because they remain 
Microsoft's intellectual proper- 
ty. The company said that it 
would grant licenses to all rele- 
vant patents at "fair" and "non- 
discriminatory" rates, without 
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actually discussing the terms. 

"We believe that providing 
open, consistent access to these 
protocols will further unleash 



the creativity of all developers 
to work on real-world interop- 
erability solutions," Tom 
Robertson, general manager of 



interoperability and standards 
at Microsoft, said in a prepared 
statement. "The implementa- 
tion of Microsoft's interoper- 



ability principles is an impor- 
tant component of our overall 
efforts to promote interoper- 
ability in the marketplace." I 
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Algorithm draws .NET and Java closer 



BY ROBERT MULLINS 

Mainsoft, which has built its 
business helping .NET and 
Java EE programs work well 
together, has introduced an 
upgrade that includes a new 
algorithm to speed the conver- 



sion of binary code to text. 

Mainsoft for Java EE, version 
2.2, adds support for Microsoft's 
ASP.NET 2.0 AJAX extensions 
for creating Web applications, 
the company said. The AJAX 
Control Toolkit helps to add fea- 



tures to a site, such as a drop- 
down menu or a submit button. 
With the upgrade, developers 
using Microsoft's Visual C# and 
Visual Basic languages can use 
ASP.NET 2.0 components to 
create applications that could 



run on a Java application server, 
Mainsoft said. 

Version 2.2 is an upgrade 
from 2.0, which Mainsoft re- 
leased in June 2007. 

Yaacov Cohen, Mainsoft 
president and CEO, explained 



"In some projects we have five simultaneous 
database environments to k&ep in synch, 
I downloaded the SQL tools from Red Gate and the 
next 14 days were the best SQL days in my life." 

Q r H;pnpld5Wn Kawptftng Bank. 
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- a task that takes ^^ 
the best part of 
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11 SQL Compare and SQL Data 
Compare are the best purchases 
we've made in the .NET/SQL 

environments We rely on these 
products for every deployment/ 1 
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"I am literally staggered at 
how much more efficient 
it is to perform simple 
data transportation with 
SOL Data Compare. In 
sons cases, it's up to 10 
times faster with SQL Data 
Compare than rt would be 
with DTS." 

Nick. Stansthirv SAGE Partners Ltd 



"Simple to use, powerful, fast - awesome. 
I have never written a testimonial before, but I 
felt compelled to do so in this case " 

Doron GnoB-tein 
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"SQL Prompt is a must-have 
tool for all T-SQL developers. 

Brian Brawder Brian Online 
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business - this would be one 
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Compare, and given 700 rows 
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to find.,, Now, what to do with 
the rest of my day :-)" 
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that the new release decouples 
development and production 
decisions. 

The new software includes 
an algorithm to more quickly 
convert binary code to text, said 
Eyal Eliahu Alaluf, vice presi- 
dent of technology at Mainsoft. 

The new algorithm increases 
the speed of conversion and 
improves overall application per- 
formance by 4% to 5%, he said. 

The overhauled algorithm 
also boosts scalability, Cohen 
said, which allows more people 
to use a Web application at the 
same time. 

Mainsoft is donating the con- 
version algorithm to the Mono 
open-source community, which 
was established by Novell to cre- 
ate tools to allow .NET applica- 
tions to run on platforms other 
than Windows. I 

TOOLKIT ALLOWS 
SELF-MARKETING 
SAAS OFFERINGS 

BY ROBERT MULLINS 

With so many people chasing 
the SaaS dollar, Jamcracker has 
recognized that success hinges 
as much on how the service is 
marketed and delivered as it 
does on the service itself. 

The company's namesake 
Jamcracker Integration Toolkit 
(JIT), launched April 9, makes 
it possible to provide SaaS 
offerings through the Jamcrack- 
er Services Delivery Network. 

JIT is an XML-based frame- 
work that allows software ser- 
vices to be published to the 
JSDN Global Services Catalog. 
With the kit, the products can be 
made JSDN-ready even without 
in-depth knowledge of the Jam- 
cracker Platform, the company 
said. In addition, SaaS ISVs in 
the JSDN can use Jamcracker 
services to handle administrative 
and support tasks. 

Jamcracker said it provides 
ISV developer support as well 
as certification and acceptance 
testing of the JSDN adapter. 

Other companies serving the 
SaaS enablement market 
include NaviSite, OpSource 
and WebAppCabaret. The busi- 
ness is expected to expand in 
step with overall revenue from 
SaaS, which Gartner research 
indicates will grow at a com- 
pound annual rate of 22.1% 
through 2011. I 
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Borland reloads test management for Flex, AJAX 



BY P.J. CONNOLLY 

Testing is becoming increasing- 
ly important as companies seek 
to wring more efficiency and 
better results out of their soft- 
ware development. Borland 
Software, continuing its open 
life-cycle management focus, 
thinks it has some answers to 
the questions involved in pro- 
ducing high-quality software. 

The company last month 
released the Silk 2008 line of 
testing tools with the goal of 
breaking down barriers among 

RHAPSODY'S C 
SUPPORT AIMS 
AT UML MODELS 

BY DAVID WORTHINGTON 

A model-driven development 
tool has been updated to honor 
the structure of C code when 
creating Unified Modeling 
Language (UML) models. 

Telelogic Rhapsody 7.2, 
which was expected to become 
available late last month, targets 
embedded developers by mak- 
ing it possible to import existing 
C code into UML while preserv- 
ing functionality, order and 
structure, the company said. 

Rhapsody's "code respect" 
capabilities make model-driven 
development in C more attrac- 
tive to embedded developers 
porting memory-sensitive ap- 
plications to UML, said Paul 
Urban, a marketing manager at 
Telelogic. 

Previous editions of Rhap- 
sody could reverse-engineer C 
code into a UML model but did 
not necessarily honor its func- 
tion or structure. 

Rhapsody also includes mod- 
el-based testing for C in this 
release. Users can conduct auto- 
mated unit tests, requirements- 
based tests and simulations from 
within Rhapsody. 

But that's not all that meets 
the eye in this release: Rhap- 
sody 7.2 provides systems engi- 
neers with visual prototyping 
capabilities for simulations. Sys- 
tems Modeling Language, a 
subset of UML, drives Rhap- 
sody's integrated graphical pan- 
els that are used for prototyping 
and validating mockups. 

In addition, Telelogic 
announced that a Rhapsody 
Eclipse plug-in would ship this 
summer. The plug-in would 
bring the modeling tool into 
the Eclipse environment. I 



business, development and 
quality assurance, and providing 
solutions to quality issues earlier 
in the development cycle. 

SilkTest 2008 features a new 
"open agent" that supports 
emerging Web 2.0 applications 



built on Adobe Flex and Win- 
dows. Later this spring, the com- 
pany plans to provide an Eclipse 
interface and Java language 
scripting support in SilkTest. 

The SilkPerformer 2008 
release offers customers trying 



to scale rich Internet applica- 
tions new horizons in load and 
performance testing, including 
the use of AMF3 (Adobe's 
ActionScript serializer) for Flex 
applications and readability and 
recognition of JSON and XML 



requests for AJAX scenarios. 

SilkCentral Test Manager has 
also seen some work for 2008, in 
flexibility for manual testers, 
security and scalability, in an 
attempt to meet the needs of 
large yet distributed develop- 
ment teams. Test asset reuse and 
management also received atten- 
tion in the new release. I 
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Java EE app analyzer ported to .NET 

Helps developers troubleshoot application performance problems 



BY DAVID WORTHINGTON 

A mature Java EE application analytics 
and monitoring solution has been ported 
to Microsoft's .NET platform. 

OPNET Technologies made OPNET 
Panorama 5.0 generally available on 
March 25. For the first time, Panorama 
provides life-cycle performance man- 
agement for .NET and Java, as well as 
Java environments within multi-tier 
infrastructures. 

The .NET features, new in this release, 
cover dynamic threshold alarms, events 
and metrics correlation, identification of 
application errors through code instru- 
mentation, and measurement collection. 



P.J. M alloy, vice president of engi- 
neering for application performance 
solutions at OPNET, explained that 
Panorama's core technology is byte code 
instrumentation. OPNET takes advan- 
tage of hooks in the .NET Common 
Language Runtime (CLR) to instrument 
applications when classes are loaded. 

M alloy explained that Panorama 
avoids rewriting developers' code by 
"surgically" implanting instrumentation 
points through .NET and J2EE APIs 
designed for that purpose. 

Panorama may be deployed in produc- 
tion environments without being a drag on 
performance, by monitoring the overhead 



it introduces and turning off its own instru- 
mentation as necessary, he noted. 

Panorama garners additional statistics 
from the CLR, including metrics for 
garbage collection, global health and heap 
utilization, and listing threads spawned by 
a process, Malloy added. 

"We borrowed heavily from lessons 
learned from instrumenting Java at that 



level of detail. Customers told us that we 
had to move beyond Java; we recognized 
that, and have worked on [.NET sup- 
port] for a while," he said. 

He added that OPNET would expand 
Panorama's .NET coverage in the future 
with more automated analysis, more 
sophisticated memory analytics and a bet- 
ter overall user experience. I 
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Panorama 5.0 instruments programs for application analytics and performance monitoring. 



Weblll Studio.NET suite updated 



BY DAVID WORTHINGTON 

Component maker Intersoft Solutions 
has shipped its first major release of the 
year, WebUI Studio.NET 2008 Rl. 

The offering introduces four controls 
and improves three others: WebCom- 
bo.NET, WebGrid.NET and WebDesk- 
top.NET ASP.NET 

Two controls are bundled with 
WebAqua.NET for Silverlight, a product 
extension to the suite. Those are Web- 
FishEye.NET, a navigation control that is 
modeled after the Mac OS X dock, and 
WebCoverFlow.NET, which displays pic- 
tures and video thumbnails in a slideshow 

The controls were built using Sil- 
verlight 1.0, said Jemmy Haryono, the 



marketing officer of Intersoft. 

Another new control, WebCallOut 
.NET, is an addition to Web Desktop 
.NET, which lets developers build con- 
text-sensitive assistance into their 
ASP.NET applications. 

Finally, WebScheduler.NET is a cross- 
language scheduling component with cov- 
erage for every language version of the 
Microsoft .NET Framework. The control 
can bind scheduling data to database 
schema via Intersoft's ISDataSource.NET 
1.0 data source component. 

Existing controls now support client- 
side events and Opera and Safari 
browsers. Intersoft said it has incresed 
integration between components. I 
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IBM Rational officially subsumes Telelogic 



BY ROBERT MULLINS 

IBM has completed its US$845 
million acquisition of Telelogic, 
giving Big Blue more leverage in 
the post-PC market for software 
applications in wireless devices, 



automobiles, home appliances 
and even robots. 

IBM said that Telelogic is now 
part of IBM's Rational division. 

Telelogic s software tools are 
used in embedded complex sys- 



tems development, serving such 
customers as Boeing, Siemens, 
Sprint and Toyota, IBM said. 
IBM and Telelogic together will 
more strongly link hardware 
and software design, better 



manage systems engineering 
efforts, ensure standards com- 
pliance and coordinate all de- 
velopment team efforts. 

IBM took a jab at competitors 
HP and Microsoft in announcing 
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the Telelogic closing. It com- 
pared its software and systems 
offering to Microsoft's and said 
that Redmond's "proprietary 
software strategy and lack of 
large-scale system development 
expertise naturally hinders their 
ability to play in this space." 
While HP is building a software 
portfolio through acquisitions, 
IBM said that HP must "first 
learn to walk in software devel- 
opment before they can run in 
systems development." 

Growth opportunities appear 
better in the non-PC arena than 
in PCs, IBM said, citing industry 
research. Venture Development 
Corp. reported that the market 
for embedded software develop- 
ment products totaled US$51 bil- 
lion in 2005, while Embedded 
Market Forecasters reported that 
the market for traditional, PC- 
based software development was 
only $292 million that same year. 

Telelogic, with headquarters 
in Malmo, Sweden, and Irvine, 
Calif., has 8,000 customers and 
1,200 employees worldwide. I 

ComponentArt 
unites Ul elements 
and Web services 

BY DAVID WORTHINGTON 

A component maker has mar- 
ried ASP.NET 3.5s ability to 
invoke Web services from 
client-side controls with its own 
user interface (UI) rendering 
technology to automatically 
update UI elements. 

ComponentArt has released 
Web.UI 2008.1, a suite of user 
interface controls for ASP.NET. 
For the first time, every control 
can serialize JavaScript Object 
Notation (JSON) from a Web 
service to create a UI structure 
in a client control. 

Microsoft built APIs for 
client-side binding to Web ser- 
vices into ASP.NET 3.5, as part 
of .NET Framework 3.5. Con- 
trols that invoke Web services do 
not need to use server callbacks, 
improving response time. 

ComponentArt president 
Mifjan Braticevic said that 
JSON is used in AJAX program- 
ming as a performance tech- 
nique because it is optimized 
for size and is efficient in terms 
of client-side performance and 
its page footprint. 

For added performance, 
JSON data is rendered in Com- 
ponentArt's own optimized for- 
mat, which uses multi-dimen- 
sional JavaScript storage arrays 
to represent data, he said. I 
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SlickEdit aims to reduce drudgery 



Other new features include 

full SCIM support, a debugger, 

and new ways to handle URLs 

/x i i ■ . ii" r\ ■ i m editor windows and through 

Code editor enables process output views, Perl regular expression syntax m a PP in g , in CO de. Automatic 

symbol translation is meant to 



BY P.J. CONNOLLY 

It's generally assumed that one 
can become more creative by 
minimizing the amount of repet- 
itive drudgery, and developers 
insist that their text editing tools 
be both flexible and intelligent 
enough to handle chores that 
are easily automated. 

In hopes of meeting that 
goal, SlickEdit announced the 
release of SlickEdit 2008, a 
cross-platform, multilanguage 
code editor. The update 
includes such new features as 
the ability to view output from 
build tools and other processes 
running in SlickEdit. 

The company has also tried 
to make its namesake editor 
easier to configure by collecting 
the options dialog into a tree 
view, with choices displayed as 
either embedded forms or in a 
tabular format. 

Installed language support 
has seen some work too, and 
new file extension and language 
manager screens in the options 

Adobe AIR for 
Linux alpha rolls 

BY ROBERT MULLINS 

A prerelease version of an 
Adobe platform for building rich 
Internet applications (RIA) for 
Linux platforms is now available. 

Adobe recently announced 
the alpha of a Linux version of 
Adobe AIR through Adobe 
Labs. AIR, released late last 
month for Mac OS X and Win- 
dows, is designed to let develop- 
ers of rich Internet applications 
run their applications on various 
desktop systems without writing 
additional platform-specific 
code, the company said. 

Also, developers can use 
Adobe Flash to add animation 
and use the open-source Adobe 
Flex framework, plus AJAX and 
HTML, to write RIAs and de- 
ploy them on Mac, Windows and 
Linux machines using AIR. 

Adobe also has made avail- 
able an update to the alpha ver- 
sion of Adobe Flex Builder 3 as 
a free download. The update 
adds support for AIR. 

The Adobe AIR free down- 
load is available only in English, 
though the final release, 
expected out this year, will also 
be available in other languages, 
according to Adobe. I 



dialog allow the use of extension 
remapping. That way, the devel- 
oper sees the options appropri- 
ate for the language in use. 



Adaptive formatting lets de- 
velopers use existing code li- 
braries as formatting sources, 
while Quick Brace converts sin- 



gle-line statements into brace- 
enclosed blocks. 

SlickEdit 2008 supports Perl 
regular expression syntax. 



keep developers focused on 
code instead of making them 
rummage through tables of 
entity references. I 
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Sun lengthens paid 
support in Java SE 



BY ROBERT MULLINS 

Sun Microsystems last month 
released Java SE for Business. 
It offers up to 15 years of paid 
support, more than twice what's 
offered now, but for its free 
quarterly updates, the length is 
reduced to three years. 

The Java SE for Business 
platform paid subscription offers 
three levels of support and is 
renewable annually, Sun said. 
The Standard support package 
sells for US$10 per employee 
per year; Premium sells for $11 
and Premium Plus for $12.50. 

The change in business 
model is intended to offer cus- 
tomers choice, said Bill Curci, 
Sun's product marketing man- 
ager for Java SE. "We want to 
encourage customers who want 
to continue getting free support 
to migrate and stay current with 
the latest release families. Or, if 
they would rather stay on these 
families longer, to offer them 
that option for a subscription." 



Sun has found that some 
Java users have older versions 
embedded in their IT infra- 
structure that they don't want or 
need to upgrade, while others, 
especially developers, want to 
upgrade to the latest version 
and don't need six years of quar- 
terly updates, Curci explained. 

Java SE for Business will be 
distributed to customers by 
ISVs, service providers and sys- 
tem integrators. 

Customers who choose the 
Premium or Premium Plus sub- 
scriptions also get biweekly 
updates with fixes that cus- 
tomers can implement, said 
Roger Calnan, Java SE director 
for sustaining and support. 

"Historically, we would give 
the fix to [enterprise] cus- 
tomers themselves, but for ISVs 
and others, we used to do fixes 
on an ad hoc basis. We need to 
do that in a more consistent 
manner," Calnan admitted. 

Premium Plus subscribers 




Bill Curci: New business model 
gives choices to customers. 

also get custom support for fix- 
es they seek, based on their 
specific needs. There will be an 
extra charge for the fix itself, 
but it will be supported under 
the $12.50 plan, said Curci. 

"We have a reasonable vol- 
ume of customers who are run- 
ning on an older update of a 
release and might need a fix 
urgently before they can 
upgrade," he noted. 

Java SE for Business is avail- 
able for systems running Red 
Hat Linux, Sun's Solaris 10 and 
Windows operating systems, 
but, as a way to entice cus- 
tomers to adopt Solaris, the 
support is included at no addi- 
tional cost for Solaris users. I 



ONLINE MARKETPLACE 
COURTS PROGRAMMERS 



BY ROBERT MULLINS 

Platform-as-a-service provider 
Coghead is opening an online 
marketplace where "journey- 
men" programmers can build 
niche software applications and 
publish them. 

Coghead Gallery, launched 
last month, is an eBay-like mar- 
ketplace where developers can 
set up "storefronts" to sell or 
give away software applications 
that they've built on Coghead's 
development platform. The 
gallery is for developers who 
perhaps lack the deepest 
knowledge of programming but 
have some expertise and an 
idea for a new application. 

"There are maybe 4 to 5 mil- 
lion professional developers in 
the world who spend their entire 
day in an IDE. We think there 
are maybe 20 to 30 million peo- 
ple who are sort of one tier 
down," said Paul McNamara, 
CEO of Coghead. "They're jour- 
neymen developers, if you will." 

The Coghead platform 
offers an application infrastruc- 



ture for adding database man- 
agement, network access, secu- 
rity or other standard functions. 

Individual developers pay 
nothing to use the Coghead sys- 
tem, but companies pay US$10 
per user, per month. 

The company has two pub- 
lishing models: Open Definition, 
in which developers give away 
their software for others to mod- 
ify, distribute and use; and Pro- 
tected Definition, in which 
developers seek to protect intel- 
lectual property in an application 
they're selling. Open Definition 
is not the same as open source, 
McNamara said, because devel- 
opers don't work with source 
code when creating applications. 

Coghead customers have 
developed niche applications 
like managing a garden nursery, 
McNamara said. The gallery 
lets clients who may have been 
value-added resellers or cus- 
tom-applications developers 
become independent software 
vendors without raising capital 
and hiring several engineers. I 
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Developers take RIAs to the enterprise 

Two-fifths of those coding Web 2.0 apps are writing for corporations 



BY ROBERT MULLINS 

REDWOOD CITY, Calif. — 
While MySpace and YouTube 
may be the most well-known 
sites of the Web's so-called 
second generation, a surpris- 
ing number of developers are 
writing similar applications for 
an enterprise, new research 
reveals. 

Close to 40% of developers 
creating collaborative programs 
are writing such Web 2.0 appli- 
cations for a corporate enter- 
prise, said John Andrews, presi- 
dent and CEO of Evans Data, 
at a developer relations confer- 
ence hosted last month by the 
research firm. 

Andrews called that "surpris- 
ing," given that the best known 
of these rich Internet applica- 
tions are consumer-oriented. 

Enterprises are using some 
of the design features of social 
networking sites — rich graph- 
ics, user-generated content and 
the like — for such business 
efforts as collaboration on pro- 
jects by team members in dif- 



ferent cities or deployment of 
enhanced Web applications to 
workers' mobile devices. 

These developers are also 
widely embracing open-source 
platforms, Andrews noted, as 
70% of developers surveyed use 
scripting languages such as 
Perl, PHP, Python or Ruby. 

"Web 2.0 is all about quick 
innovation and quick develop- 
ment," Andrews explained. 
"[Developers] are enabled by 
great product, but they're also 
enabled because of the light- 



weight kind of development 
world that they live in." 

Evans also shared with atten- 
dees data on the growth of the 
global developer community. 

The survey showed that 42% 
of developers use agile develop- 
ment methods instead of the 
traditional "waterfall" method, 
and 36% plan to adopt agile in 
the near future. Only 22% had 
no plans for agile. 

Evans also shows that the 
total developer population 
continues to grow faster in the 



expanding economies of India 
and China than it does else- 
where. It projects the develop- 
er population in India to grow 
15% to 16% a year through 
2011 and in China by 10% to 
12%, while the population in 
the U.S. will expand only 
between 3.5% and 4%. 

The global population of 
developers is projected to grow 
to 17.6 million in 2011 from 
13.2 million in 2007, according 
to Evans. 

The population survey is a 




Andrews: Developers are tapping 
features of social networking sites. 

projection of trends based on a 
survey of 1,400 developers 
worldwide. I 



MySQL 5.1 touts 15% performance jump 

Open-source database boosts partitioning, data replication, event scheduling 



BY ROBERT MULLINS 

SANTA CLARA — Sun Mi- 
crosystems has introduced 
MySQL 5.1, during the first 
MySQL Conference and Expo 
since Sun acquired the open- 
source database company. 

The upgrade, to be general- 
ly available later this quarter, 
supports five forms of table and 



index data partitioning, 
enabling what Sun called faster 
query response by scanning 
only the relevant partitions of 
data, instead of the entire table 
or index. 

Two new data replication 
options — row-based and hy- 
brid — offer more efficient and 
safer replication schemes for 



the application. A new event 
scheduler tool has been added 
for common recurring SQL- 
based tasks. 

Moreover, for subscribers 
of MySQL Enterprise, an 
upgrade adviser warns of bugs 
that might afflict their sys- 
tems and recommends how to 
upgrade their database servers 



in order to correct the 
problem. 

"Basically, it's got a 15% per- 
formance gain, based on 
benchmarks, compared with 
older versions of 5.0," said Zack 
Urlocker, executive vice presi- 
dent of products for MySQL, 
which was acquired by Sun this 
year for US$1 billion. I 
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lona extends WCF for CORBA and Java 



BY DAVID WORTHINGTON 

The "legacy" applications on 
which businesses rely can be 
difficult to make work with 
Microsoft's .NET Framework. 
That's givng one component 
vendor a chance to show that 
SOAP isn't always the best way 
to implement Web services. 

On April 1, lona Technolo- 
gies announced the availability 
of a beta of Artix Connect for 
Windows Communication 

Foundation. Artix is a SOA 
infrastructure product that 
mediates between WCF, a com- 
ponent of the .NET Frame- 
work, and other applications. 

Artix Connect for WCF lets 
.NET developers connect their 
applications with CORBA and 
Java without using custom 
adapters or generating new code 
by using Web Services Descrip- 
tion Language interfaces. 

lona CTO Eric Newcomer 
noted that Artix Connect works 
behind the firewall, using native 
binary communication protocols 
such as JMS (Java Message Ser- 
vice) and Java RMI over HOP 

CVC: MISSION 
ACCOMPLISHED 

< continued from page 4 

have a story to say around their 
upcoming product and tech- 
nologies to do it themselves. 

"In this sense, it is Microsoft 
actually leveraging our user 
base to promote their products 
and .NET-related technologies, 
or a good MS -partner symbiosis 
if you want to put it more ele- 
gantly," he wrote. 

In contrast, Sax believes that 
VSIP is strongly promoting com- 
ponent makers. In addition, he 
observed that Microsoft is ramp- 
ing up its support of the commu- 
nity by thinking about third par- 
ties in the design of its 
frameworks and products, and 
that the Microsoft sales force has 
an increasing awareness of com- 
ponent makers, as shown by a 
rise in the level of co-marketing. 

"Several component vendors 
are some of Microsoft's 
strongest partners, and compo- 
nents get lots of visibility on the 
partner CD, [on] MSDN, 
through the Visual Studio 
gallery. Most importantly, 
Microsoft's support for compo- 
nent vendors has been consis- 
tently strong in the last few 
years, and it's clear that it is 
here to stay," said Sax. I 



(Remote Method Invocation 
over Internet Inter-Orb Proto- 
col) for CORBA systems. He 
said that native solutions such as 
Artix's deliver more reliability 
and speed than do SOAP-over- 
HTTP Web services. 



ZapThink analyst Jason 
Bloomberg said there is a 
perennial give-and-take be- 
tween performance and flexi- 
bility. "The advantage to a tight- 
ly coupled solution like Artix is 
that you can achieve higher 



performance" than with SOAP- 
based Web services, he said. 

Artix Connect for WCF may 
be used with more Artix prod- 
ucts to connect with IBM Web- 
Sphere MQ, mainframe applica- 
tions (including IMS, CICS and 



COBOL), and Tibco's Ren- 
dezvous message bus. A general 
release is expected this month. 

Newcomer credits Microsoft 
for its collaboration around 
interoperability and said that 
Microsoft had "thrown the 
doors wide open" after the 
announcement of its latest 
interoperability initiative. I 
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Office Open XML gets ISO approval after struggle 



< continued from page 10 

As first reported by The Wall 
Street Journal, Microsoft's mul- 
tiyear lobbying effort has also 
spawned an investigation by 
European Union anti-trust reg- 
ulators. The EU has taken inter- 



est in Microsoft's activities to 
promote OOXML and whether 
those efforts were legal. 

Guy Creese, vice president 
and research director for Col- 
laboration and Content Strate- 
gies at Burton Group, said that 



Microsoft may have won a 
pyrrhic victory — it gained the 
seal of approval from the ISO, 
along with a "huge reservoir of 
hard feelings" from OOXML's 
opponents. 

Pieter Hintjens, of the 



European Software Market 
Association, a non-profit orga- 
nization dedicated to patent 
reform, said in a prepared 
statement, "Nobody wants 
standards you can buy. 
Microsoft bought a standard at 
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ECMA. Now they bought ISO. 
Who wants this?" 

Microsoft's Robertson ac- 
knowledged the acrimony, saying 
the company has a "strong 
desire" to move ahead now that 
the ISO process is closed. He 
added that the company is fo- 
cused on its document interop- 
erability initiative to establish 
"high-quality" interoperability 
between document formats. 

According to Robertson, 
Microsoft will devote the com- 
ing months to engaging devel- 
opers to discuss and test imple- 
mentations of OOXML with 
emphasis on what has changed 
over the past year as a result of 
the standards process. 

Robertson said that the ISO 
process has resulted in a better 
standard. 

Microsoft will also work to 
identify what gaps exist 
between OOXML and other 
formats. To that end, the com- 
pany will develop a standard 
library of documents to test 
against and create templates 
optimized for interoperability 
between Open Document For- 
mat (ODF) and OOXML. 

Longer term, Microsoft is 
developing interoperability test 
suites for each document for- 
mat. Robertson would not com- 
mit to a timetable for the test 
suites' release; he gave a circum- 
locutory reply that the "commu- 
nity" has to make that decision. 

ERA OF COLLABORATION 

"Developers should jump in with 
both feet in efforts to create a 
new era of collaboration 
between implementers of Open 
XML and other formats to 
address interoperability issues. 
We will deliver higher-quality 
interoperability," said Robertson. 

He concluded that the pres- 
ence of multiple document for- 
mats was good for the industry, 
with each format having its own 
characteristics that meet differ- 
ent needs in the marketplace. 

"There are use case scenarios 
where OOXML is the clear 
choice, and others where ODF is 
fine. At the end of the day, it's 
about the technologies that 
implement that format, and we 
are developing a broad eco- 
system around Open XML," he 
pointed out. 

Burton Group's Creese said 
that many enterprises were 
already likely to adopt OOXML 
by default, and ISO approval 
just makes it an easier sale. I 
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Gap narrowing for 
single, multicore 

Optimized software use on the rise 



BY ROBERT MULLINS 

The embedded software industry is 
beginning to close the gap between the 
capabilities of applications written for a 
single-core processor world and the 
growing demand for those applications 
to take advantage of multicore plat- 
forms, according to figures released last 
month at an industry conference in 
Santa Clara. 

But the gap between multicore 
processors and optimized software 
remains, and the hurdles — the burden 
of legacy code, insufficient programmer 
skills and the lack of industry stan- 
dards — remain high, particularly in 
embedded. 

The Multicore Association, host of 
the three-day Multicore Expo confer- 
ence in Santa Clara, is forming a work- 
ing group to address the problem of soft- 
ware applications that need to be 
written, or in many cases rewritten, to 
get the best performance out of the 
growing array of multicore processors 
coming to market. Intel and Microsoft 
are also supporting new research centers 



at the University of Illinois at Cham- 
paign- Urb ana and the University of Cal- 
ifornia, Berkeley, promote parallel com- 
puting advances that match software 
capability to multicore processing. 

The software industry is changing, 
but slowly, said Eric Heikkila, director of 
the embedded hardware practice at the 
research firm VDC. Though only 6% of 
software vendors surveyed offered mul- 
ticore-optimized software in 2007, that 
continued on page 28 ► 



BUILD A NEW HOUSE OR REMODEL? 



While researchers search for a new way to write multicore applications, companies are struggling 
with whether to adapt legacy applications for multicore or incorporate them only into new appli- 
cations. To gauge all that decision-making, Evans Data Corp. surveyed 385 developers last year 
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Communications API to ease push into embedded 



BY ROBERT MULLINS 

To hasten the development of multicore 
software applications for embedded sys- 
tems, an industry group recently said it 
expects soon to release a communica- 
tions API for multicore processors. 

The Multicore Association, which 
hosted a conference last month in Santa 
Clara, said version 1.0 of the Multicore 
Communications API (MCAPI) was 
scheduled for release late last month, 



after press time. MCAPI is targeted at 
closely distributed embedded systems 
and can scale to support hundreds of 
processor cores, the association said. It is 
intended for systems with tight memory 
constraints and task execution times that 
require a reliable on-chip interconnec- 
tion and high system throughput in 
applications that include multimedia, 
networking and automotive. 

A working group of association mem- 



bers, including chip vendors, software 
makers and tool providers, has been 
developing the API the past two years, 
said Marcus Levy, president of the Multi- 
core Association. 

"It's basically a design for intercore 
communications through a message-pass- 
ing protocol," Levy said. "It's really low 
latency and lightweight, and we modeled 
it after other communications APIs." 

continued on page 28 ► 
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'We don't know what we should be teaching' 

Academia seeks industry's input on secrets to parallel computing 



BY ROBERT MULLINS 

At least one computer scientist has 
known about the need for parallel com- 
puting for decades, and he expressed 
surprise that the gap persists between 
processor and software capability. 

"I wake up almost every day shocked 
that the hardware industry has bet its 
future that we will finally solve one of the 
hardest problems computer science has 
ever faced, which is figuring out how to 
make it easy to write parallel programs 
that run correctly," said David Patterson, 
professor of computer sciences at the 
University of California at Berkeley 

Today, industry and academia realize 
that gap remains an obstacle to optimizing 
the capabilities of the growing numbers of 
multicore processors in servers, comput- 
ers and embedded in everything from TV 
set-top boxes to network routers. 

Both groups are working on solutions 
with long-term approaches, as well as 
quick- and-dirty ones. In the short term, 
they are offering ways to "infuse," as an 
AMD executive put it, parallelism capa- 
bility into code written for unicore 
processors. But, in the long term, indus- 
try sources said, there needs to be a way 
to write code for parallel computing, 




'If they can do it right they can make 
beautiful music. But if they don't do it 
right, it can be a big mess. ' 



—David Patterson likens parallel computing to conducting 



especially for new software applications, 
rather than legacy software. 

Schools like Berkeley are focusing 
their research on that while looking for a 
lead from industry. 

"We don't even know for sure what 
we should be teaching," said Patterson, 
"but we know we should be changing 
what we're teaching." 

Development of parallel computing 
curriculum has been "scattershot and 
not [done] in a serious and systematic 
way," added Maurice Herlihy, a profes- 
sor of computer science at Brown Uni- 
versity in Providence, R.I. 

Berkeley, though, has new resources 
with which to advance parallel comput- 



ing. With the University of Illinois at 
Urbana-Champaign, it will share US$20 
million from Intel and Microsoft to fund 
Universal Parallel Computing Research 
Centers (UPCRC), one at each campus, 
over the next five years. 

At Berkeley, the funds will augment 
research already done by the school's 
Parallel Computing Laboratory and 
enable the university to hire 50 
researchers, 40 of them graduate stu- 
dents, to dig into the problem, said Pat- 
terson, who also serves as director of 
Cal's UPCRC. 

While Berkeley's faculty will research 
new ways to write software for paral- 
lelism, it knows it has to begin teaching 



undergraduate students something 
about what will likely be the future of 
software development, he said. 

Berkeley has begun teaching its 
freshmen an introduction to parallel 
computing based on what Patterson 
called the "map-reduce" method, or 
data level parallelism. In map-reduce, 
he explained, programming is done in 
two phases. First, you map a function 
that operates on millions of bits of data 
stored on hundreds of computers, such 
as adding numbers up. You end up with 
sums of the numbers on each computer. 
In the second phase, you reduce the 
hundreds of sums on each computer 
into a single sum. "This is a simple par- 
allelism, and we think that is something 
you can teach," he said. 

Patterson added that upperclassmen 
are being taught to confront some of the 
"sticky issues" of parallelism, such as 
synchronization and load balancing. 
Things can get sticky, he added, given 
that parallelism is not simply dividing up 
software instructions equally between 
four or eight cores, like a supermarket 
opening more checkout stands for the 
evening rush. Patterson compared paral- 
continued on page 29 ► 
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Gap shrinks in multicore arena 



< continued from page 26 

number is expected to grow to 
40% by 2011, Heikkila said at 
the conference. 

"The industry has always 
been able to overcome techni- 
cal challenges, and it's extreme- 



ly likely that multicore [chal 
lenges] will be overcome as 
well," he told his audience. 

Demand for multicore 
processor-based products will 
force them to catch up, Heikki- 
la continued, as sales of multi- 



core products are forecast to hit 
US$2.47 billion by 2011, from 
$372 million in 2007. 

Multicore software growth is 
constrained by the amount of 
legacy code already used in 
many embedded applications. 



A VDC survey of enterprises 
showed that 88% of the embed- 
ded software they're running on 
multicore processors is written 
in C or C++, which may be dif- 
ficult to convert to multicore. 
"I've had customers say, 1 
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have this code base that's been 
running for 16 years uninter- 
rupted and it's a nuclear power 
plant control system. I really 
would like to take advantage of 
multicore, but I don't really 
want to touch that code,'" 
explained Doug Davis, vice 
president and general manager 
of the embedded group at Intel. 

Competition among vendors 
is also hampering agreement on 
industry standards, Markus 
Levy, president of the Multi- 
core Association, said. "There 
are still a lot of companies who 
have their own proprietary 
products and want to keep it 
proprietary. It's difficult to get 
them to admit that standards 
are inevitable." 

But the future of multicore 
is brighter in writing new appli- 
cations than in rewriting old 
ones, said Wen-mei Hwu, a 
University of Illinois professor 
speaking at the conference. 

"The opportunities of many 
cores are in new revolutionary 
applications," Hwu said. I 

COMMUNICATIONS 
API FOR EMBEDDED 

< continued from page 26 

PolyCore Software, an associ- 
ation member, expects to release 
the first commercially available 
version of MCAPI, said CEO 
Sven Brehmer, who also chaired 
the MCAPI working group. 

Much of the discussion at the 
Multicore Expo centered on 
how software developers can 
write applications to take advan- 
tage of the performance capabil- 
ities of multicore chips. Applica- 
tions written for single-core 
processors can inhibit the perfor- 
mance of multicores, but rewrit- 
ing those apps can be difficult. 

"I think it's a learning curve 
our industry is going through," 
said Tomas Evensen, CTO of 
Wind River, a maker of embed- 
ded device optimization soft- 
ware. "The first mistake [pro- 
grammers] may make is to 
think multicore is not too much 
different from unicore, and 
then they go ahead but later 
find themselves in a deep hole." 

Single-core applications need 
to be modified or rewritten to 
allow parallelism — the ability of 
the application to execute multi- 
ple tasks simultaneously using 
different cores. For years, chip- 
makers have speeded perfor- 
mance of single-core chips by 
raising frequency or clock speed. 
But those gains have hit the point 
of diminishing returns. I 
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Wanted: parallel computing answers 



< continued from page 27 

lei computing to conducting a 
symphony. Instruments like the 
flute, cello, harp or tympani 
each have different roles to 
play, and some play different 
notes than others. It's only 
when they work together with a 
conductor that they perform 
Beethoven. 

"If they can do it right, they 
can make beautiful music. But 
if they don't do it right, it can be 
a big mess," he said. 

Patterson did not discount 
the possibility that the ultimate 
solution to parallel computing 
is to create a whole new lan- 
guage: "This is such an impor- 
tant problem that nothing is 
ruled out." 

Others, though, shudder at 
that possibility. In embedded 
software, for instance, C + + pre- 
dominates as the language of 
choice and is written for uni- 
core processors, noted Eric 
Heikkila, director of the 
embedded hardware practice at 
the research firm VDC, during 
a presentation last month at the 
Multicore Expo in Santa Clara. 

"A true parallel program- 
ming language would take 15 to 
20 years to become ubiquitous. 
Kids have to be learning the 
language in college and then 
using it throughout the indus- 
try," Heikkila said. 

More likely than the emer- 
gence of a new language is the 
potential for existing languages 
to evolve parallel programming 
features, said Brown Universi- 
ty's Herlihy. In March, he and a 
co-author published what is one 
of the first textbooks on multi- 
core programming. 

"I don't think we need a new 
language. What we need is 
more of an incremental move- 
ment," he said. 

That's why interim solutions 
are needed to revise legacy soft- 
ware written for unicore pro- 
cessors, as well as software in 
development, said Margaret 
Lewis, director of commercial 
solutions and software strategy 
at multicore chip maker AMD. 

AMD supports academic 
efforts at schools such as Stan- 
ford University in Palo Alto, 
Calif., and partnerships with 
companies such as Microsoft, 
said Lewis, but also has devel- 
oped ways to introduce paral- 
lelism in code today. 

AMD offers a code library 
with "routines" that can be 



infused into existing single- 
threaded code to add "a nice 
level of parallelism," she said. 

In February, the company 
released its AMD Performance 
Library code to the open- 



source Framewave project 
community, in a move it called 
a commitment to the further 
development of parallelism. 

AMD also is trying to infuse 
parallel coding techniques 



through compilers and code 
analyzers, Lewis said, but 
admitted that with these inter- 
im steps, "programmers aren't 
getting the full benefits of par- 
allelism . . . but it runs better in 



a multicore environment." 

Adding to the argument for 
incrementalism, she also said 
that even as parallelism 
spreads, some applications 
would still not be suited for 
multicore processing. Her anal- 
ogy: "You can't have nine 
women be pregnant one month 
each and produce a baby." I 
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Google launches free App Engine hosting service 



< continued from page 1 

application, Google said. 

Users will be able to regis- 
ter only three applications 
apiece and will be able to buy 
additional network capacity 



"eventually," Google added. 

The primary components 
consist of Google's BigTable 
database and GFS (Google 
File System) data storage ser- 
vices, running on a Python 



application server. Developers 
may also use Google's broader 
library of APIs for account 
authentication, GData for 
reading and writing data on the 
Web, Gmail e-mail service, 



and the URL Fetch API, 
which provides HTTP access 
to other Google services. 

App Engine will host appli- 
cations in a Python 2.5.2 run- 
time environment, according 
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to Google's project manager, 
Pete Koomen, who added that 
the company might support 
other programming languages 
and runtime environments in 
future releases. 

In addition, App Engine 
offers a downloadable soft- 
ware development kit, which 
includes a Web server appli- 
cation that emulates App 
Engine services on a develop- 
er's computer. 

Some libraries that support 
writing to disk and modules 
that are written in C are dis- 
abled on Google's system, 
added Koomen. Python appli- 
cation frameworks, including 
Django, are supported. 

THE COMPETITION 

The launch of Google App 
Engine is expected to compete 
against Amazon's EC2 (Elastic 
Compute Cloud) application 
hosting service and Sales- 
force's AppExchange. Both of 
those services aim to deliver 
software applications over the 
Internet, and App Engine 
works from similar strengths, 
said Burton Group analyst 
Guy Creese. 

"It's a great alternative for 
folks that are headed in that 
[cloud computing] direction," 
he said. "You write code and 
get the logistics with it." 

Google said that App 
Engine will allow developers 
to do several things: launch 
their applications without the 
hassle of configuring servers 
or storage; scale quickly if 
demand picks up by leveraging 
Google's massive infrastruc- 
ture; and integrate their appli- 
cations with existing Google 
applications, such as Gmail or 
Google Maps, without having 
to build those parts of the 
application themselves. 

App Engine's initial soft- 
ware development kit is gener- 
ally available for Linux, Mac- 
intosh and Windows users, but 
Google has restricted access to 
the App Engine servers to the 
first 10,000 applicants. The 
company said that it will 
broaden access during the 
near future. Applications will 
be hosted under the 
appspot.com domain. 

Google has not disclosed its 
paid service tiers, but Koomen 
said that it would be competi- 
tive with other offerings on the 
market. I 
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Salesforce for Google Apps would boost SaaS model 



< continued from page 1 

customers can focus on building 
their core business rather than 
the applications that support it." 

The deal makes SaaS a more 
attractive alternative to the tra- 
ditional license model for soft- 
ware, said Jeffrey Kaplan, man- 
aging director of the research 
firm ThinkStrategies. More- 
over, buyers of SaaS, who are 
seeing a "gold rush" of SaaS 
vendors emerging, might be 
more confident purchasing 
from major players such as 
Salesforce and Google. 

"Some IT customers are 
becoming a bit apprehensive 
about having to buy their SaaS 
apps from too many sources," 
said Kaplan, "so the winners are 
going to be the more prominent 
players who have the strongest 
platform or the broadest portfo- 
lio of service." 

Among the integrated appli- 
cations are: Salesforce and 
Gmail for tracking e-mails; 
Salesforce and Google Docs for 
real-time collaboration by mul- 
tiple users on the same docu- 
ment; Salesforce and Google 
Talk for instant messaging; and 
Salesforce and Google Calen- 
dar, for scheduling meetings 
and events and viewing the cal- 
endars of others being brought 
in on a project. 

CUSTOMER CLOUT? 

The partnership was spurred 
partly by customer comments 
on Salesforce's Ideas 

Exchange, its community 
forum, said Clarence So, chief 
marketing officer of Sales- 
force. "They said, 'We love 
working together with these 
products, [so] let's just put it 
all in one place.' " 

Currently, Salesforce for 
Google Apps will be available to 
Salesforce customers free, 
while a paid support service 
plan for the program, at US$10 




Google Apps from Salesforce.com: 
Calendar, Email, IM and Documents 
combined with automation tool. 



per user per month, is expected 
to be available this summer. 

News of the partnership 
has fueled speculation that the 
next step could be Google's 
outright acquisition of Sales- 



force, which has also been the 
subject of conjecture involving 
Oracle or Microsoft as the 
purchaser. 

ThinkStrategies' Kaplan said 
that he has no inside knowledge 



of any imminent deal but 
added, "I don't think it's going 
to happen anytime soon." 

He has not ruled out the 
possibility that Oracle would 
bid for Salesforce to shore up 



Oracle's burgeoning SaaS busi- 
ness. But he added, "If that 
were to come about, it would 
be Google that would be the 
white knight that would come 
in to try to rescue Salesforce." I 
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Yahoo eyes alternatives to Microsoft 



< continued from page 1 

engine market, compared with 
17.7% in December. 

By comparison, Google, the 
market leader, was shown to 
have a 58.7% share in March, 



and Microsoft's MSN and Live 
Web properties held 11.2%. 

DeMichillie said that 
Microsoft appears convinced it 
is so far behind Google in the 
search market that it must buy 



its way into second place. 

For its part, Yahoo's board 
has rejected Microsoft's as- 
sessment. Its position remains 
that any transaction must fully 
reflect the value of Yahoo, 



including any strategic bene- 
fits to Microsoft that would 
provide certainty to Yahoo's 
shareholders. 

The board's reply cited 
Yahoo's free cash flow and earn- 
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ings potential, recent invest- 
ments in advertising platforms 
and future growth prospects, 
strong global brand and large 
worldwide audience, and its 
unconsolidated — or off-the- 
balance sheet — investments as 
factors in its decision. 

But Ballmer raised a new 
talking point, faulting Yahoo for 
adopting plans that have made 
any change of control more 
costly. In recent months, Yahoo 
has introduced the Amp adver- 
tising management platform as 
well as several mobile product 
offerings. 

He wrote, "We believe that 
the majority of your sharehold- 
ers share this assessment, even 
after reviewing your public dis- 
closures relating to your future 
prospects." Ballmer's letter 
ended with an indictment of 
Yahoo's board for failing to give 
due consideration to a transac- 
tion that, according to him, has 
"tremendous benefits" for 
Yahoos employees and share- 
holders. 

Yahoo's first-quarter 2008 
results are due out May 8. Lau- 
ra DiDio, a senior analyst with 
Yankee Group, said that 
Microsoft will have no other 
option than to raise its bid if 
those results are strong. "If 
they are weak, or so-so, then it's 
game-set-match Microsoft," 
she said, adding that the pre- 
sent economic conditions may 
work against Yahoo. 

YAHOO UNDERVALUED? 

Yahoo's board indicated that 
although it is not opposed to a 
deal with Microsoft, it was still 
exploring strategic alternatives, 
saying that a "significant por- 
tion" of the company's share- 
holders agrees that Microsoft's 
proposal undervalues Yahoo. 

The board also noted that 
the value of Microsoft's propos- 
al might have eroded some 
because of a fall in Microsoft's 
stock price, which was $31.91 
on Jan. 31. 

DiDio said that the board's 
willingness to entertain a deal 
with Microsoft demonstrates 
that Ballmer's pressure tactics 
are working. He "holds the 
upper hand in terms of being in 
a stronger position than Yahoo's 
current board of directors. Yahoo 
is not averse to Microsoft's taking 
it over; it just wants better 
terms," she observed. 

Nonetheless, a deal with 
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after Ballmer's threatening letter 



Microsoft may not be Yahoos 
only option. On April 9, Yahoo 
served up Google AdSense ads 
alongside its own search results, 
amid rumors that its board was 
entering into negotiations with 
AOL. 

Yahoo explained that it was 
conducting a limited test of 
Google's AdSense technology. 
The test applied only to traffic 
from Yahoo.com in the United 
States and lasted for about two 
weeks, according to the company. 

When asked about AOL's 
involvement, AOL senior vice 
president of corporate commu- 
nications Anne Bentley told SD 
Times that the company had no 
comment. 

News Corp., owner of 
MySpace, is contemplating an 
alliance with Microsoft in its 
bid for Yahoo in hopes of creat- 
ing a more formidable rival to 
Google, according to the Asso- 
ciated Press. 

A research note published 
April 10 from UBS analysts 
Heather Bellini, Abhey Lamba, 
Michael C. Morris and Ben- 
jamin Schachter argued that 
Yahoo's management would 
have a difficult time convincing 
shareholders that a deal with 
AOL is worth more than 
Microsoft's offer and that 
repurchased shares priced 
higher than $35 per share 
would likely lose ground after 
the buyback. 

The analysts noted that a 
Yahoo deal with AOL would 
include outsourcing the compa- 
ny's search capabilities to 
Google, in stark contrast to the 
strategy of Yahoo management, 
which combines search with 
display. 

UBS's analysts concluded 
that a joint bid with News Corp. 
would make sense only if 



Air. 



Microsoft was seeking a financ- 
ing partner, which analysts do 
not believe Microsoft needs. 
Such an arrangement would 
increase the integration risk 
and may outweigh the lower 



financial risk, they noted. 

Ultimately, the analysts 
think Microsoft will prevail. 
"We continue to believe reach- 
ing a mutual agreement with 
Microsoft would be the best 



way for Yahoo to potentially 
extract a higher Microsoft bid 
(likely $32 to $35)," said the 
UBS research note. "The alter- 
native would be for Yahoo 
shareholders to tender, al- 



though this process would not 
be as expeditious as if the two 
sides were to come to terms 
and could involve a lower offer 
price, making the battle poten- 
tially even more protracted." I 



Ballmer: Promises proxy fight if 
three-week deadline is not met. 



Paradise # 
L05 03101A02 

$ 3,214." 



Your best source for 
software development tools! 



LEADTOOLS 
Document Imaging Suite 

by LEAD Technologies 

Document Imaging Suite allows developers to 
add specialized document image processing, 
viewing, high speed scanning, annotations, 
and document image compression to their 
applications. Convert images to editable 
documents with high speed OCR/ICR/OMR 
modules. Read and write a wide variety of 
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• 150+ Image Formats 

• High speed TWAIN & WIA Scanning 
•WPFXAML Controls 
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DevTrack Small Team Edition 

Powerful Defect and Project Tracking 
by TechExcel 

TechExcel DevTrack is the most powerful, 
affordable and easy-to-use defect and project 
tracking tool for development organizations. 
You'll dramatically transform your development 
processes, save significant time and resources, 
and deliver quality products on-time and 
on-budget. 

• Sophisticated workflow engine 

• Point-and-click administration 

• Fully configurable user interface 

programmers.com/techexcel j 
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suite of Internet communications components 
for professional developers is here! 
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new functionality with support for every major 
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StorageCraft ShadowProtect 
IT Edition v3.0 

by StorageCraft 

Create, edit or restore backup images on as 
many servers, desktops and laptops as needed. ! 
Create online or cold state backups in minutes, 
no software installation required. StorageCraft™ 
ShadowProtect IT Edition provides complete 
bare metal recovery in minutes. ShadowProtect • 
IT Edition provides IT Professionals with a 
bootable Windows environment to create and 
restore compressed and encrypted backups, 
no software installation required. 
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j dtSearch Engine for Win & .NET 

| Add dtSearch's "blazing spec 
| (CRN Test Center) searching and i 
| file format support 
■ • dozens of full-text and fielded 
data search options 

• file parsers/converters for hit-highlighted 
display of all popular file types 

• Spider supports dynamic and static web data; 
highlights hits with links, images, etc. intact 

• API supports .NET, C++, Java, SQL and more; 
new .NET Spider API 

"Bottom line: dtSearch manages a terabyte of 
text in a single index and returns results in 
less than a second. " — InfoWorld 
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VMware Infrastructure 
Acceleration Kits 

VMware Infrastructure 3 offers SMB 
organizations a scalable and cost-effective 
way to optimize utilization of technology 
assets, simplify IT management and protect 

I the data and IT environments that run their 
businesses. Three new Acceleration Kits are 
now available, one for each of the three 
editions of VI3. These new kits offer midsize 
and smaller organizations and branch offices 
a cost-effective way to deploy a comprehen- 
sive virtualization solution that includes 
centralized management functionality. 

i The ideal organization has a growing IT 
environment with between 1 5—60 servers. 
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c-tree Plus® 

by FairCom 

With unparalleled performance and sophistication, 
c-tree Plus gives developers absolute control over 
their data management needs. Commercial 
developers use c-tree Plus for a wide 
variety of embedded, vertical market, 
and enterprise-wide database applications. 
Use any one or a combination of our flexible 
APIs including low-level and ISAM C APIs, simplified 
C and C++ database APIs, SQL, ODBC, or JDBC. 
c-tree Plus can be used to develop single-user and 
multi-user non-server applications or client-side 
application for FairCom's robust database server 
— the c-treeSQL™ Server. Windows to Mac to 
Unix all in one package. 
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Vizioncore vReplicator 

by Vizioncore 

vReplicator is the real-time replication solu- 
tion for the VMware ESX Server environ- 
ment. Replication is performed outside the 
guest at the Service Console. The replica- 
tion scheme is based on time elapsed 
and/or the size threshold for changes in 
the cache of the files being replicated 
(.VMDK and .VMX). With vReplicator, the 
entire virtual machine is replicated, includ- 
ing configuration settings, patches to the 
OS, the applications themselves as well as 
the data and all other OS-level changes. 
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Add grid, combo, editing, navigation and charting 
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RadControls for ASP.NET enhances your Web 
applications by adding AJAX functionality to your 
ASP.NET projects. The suite takes full advantage 
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RadControls for ASP.NET helps developers deliver 
feature-rich, standards-compliant (WAI-A, WCAG 
1.0, XHTML 1.1) and cross-browser compatible 
Web applications, while significantly cutting 
their development time. RadControls for ASP.NET 
includes: RadEditor, RadTabstrip, Radlnput, 
RadCalendar, RadUpload, RadWindow, RadAjax, 
RadGrid, RadCombobox, RadMenu, RadSpell, 
RadChart, RadTreeview and more. 
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• Nested tables, headers & footers, text 
frames, bullets, numbered lists, multiple 
undo/redo, sections, merge fields 

• Ready-to-use toolbars and dialog boxes 



Professional Edition 

Paradise # 

T79 02101A01 

$ 811." 



Paradise # 
V79 04201 E01 

$ 432." 

programmers.com/vizioncore 



programmers.com/theimagingsource 

Altova® MapForce® 2008 

Visual Data Conversion, ^^^ 

Transformation, and ^^yV ALTOVA* I 

Integration Tool ITI mapforce® 

by Altova 
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its visual interface, users can map 
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or auto-generate an application for 

recurrent transformations. Languages for 
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i ! Multi-Edit 2006 

by Multi Edit Software 

Speed, depth, and uncompromising access to 
the inner workings of the machine, Multi-Edit 
2006 delivers it all. A top tier program editor, 
ME2006 provides a single environment 
which can control all your VCS programs and 
compilers, and at the same time integrate 
with your existing RAD environments. Right 
out of the box, ME2006 comes ready to roll 
handling large (the only limit is your hardware) 
DOS/Windows, UNIX, binary, and Macintosh 
files in over fifty programming languages — 
including Ruby, XHTML and more. 
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The Visual Simulation Environment of Robotics Developer Studio 2008 can record position and 
orientation, and can play back stored activity files. The simulator now permits 2D labels. 

Microsoft unveils next 
Robotics Studio version 



BY P.J. CONNOLLY 

Microsoft's efforts in developing tools 
for robotics took another step forward 
recently, when the company released a 
preview of the next version of its pro- 
gramming platform. 

Robotics Developer Studio 2008 
builds on the original release, Robotics 
Studio 2006, according to Microsoft 
robotics group general manager Tandy 
Trower, and is due for release later this 
year. The company made a community 
technology preview of Robotics Devel- 
oper Studio available for download on 
April 9. The name change lines up with 
existing product lines and better reflects 
its role as a development tool, the 
announcement noted. 

The updated developer tools now 
allow the use of distributed LINQ 
queries to reduce network utilization 
and simplify service authoring. Runtime 
performance has also seen a boost, 
according to Trower, with the company 
estimating interservice throughput gains 
of 150% to 300%, between nodes as well 



as within nodes. According to the com- 
pany, services now load twice as fast as 
they had. 

The tools themselves have seen oth- 
er work as well. The Visual Program- 
ming Language tool now allows users 
to visually define computational 
domains for managing distributed pro- 
gram execution. Meanwhile, the simu- 
lation environment tool now can 
record and play back simulations, and 
its floorplan editor simplifies the defin- 
ition of complex interiors and building 
structures. 

Since the launch of Robotics Studio 
2006, more than 200,000 copies of the 
software have now been downloaded, 
according to Microsoft. The software 
is free for noncommercial applications 
but must be licensed for commer- 
cial use. 

The company also announced a virtu- 
al robotics competition, called 
RoboChamps, which was expected to 
launch April 21; details are available at 
www.robochamps.com. I 



EXPRESSLOGIC VISION WIDENS 



BY P.J. CONNOLLY 

ExpressLogic isn't leaving the real-time 
operating systems market, but the com- 
pany is seizing an opportunity by releas- 
ing an Eclipse-based IDE it calls 
"RTOS -agnostic." 

BenchX, meant to be a comprehen- 
sive IDE for embedded systems, is 
based on the Eclipse Europa version of 
the C/C + + Development Toolkit. 

Although the company expects to 
offer BenchX for most 32-bit architec- 
tures, the initial release works with 
ARM, ColdFire, MIPS and Power 
Architecture processors. 



Besides the IDE, BenchX includes a 
wizard-driven project builder, a lan- 
guage-sensitive editor and code browser, 
GNU compiling and debugging tools, a 
simulator of target instruction sets, and a 
hardware probe. 

Company executives characterized 
the new release as "a huge step for- 
ward," and president William Lamie 
pointed out in the announcement that 
BenchX was designed as an "afford- 
able" toolset. 

Licenses begin at US$1,000 per seat, 
which includes three months of techni- 
cal support. I 
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Aonix refreshes VM 
platforms for real-time 



BY P.J. CONNOLLY 

Virtualization is everywhere, but nowhere 
may it have more of an impact than it does 
on embedded systems. Recognizing that, 
Aonix in recent weeks has beefed up both 
Perc Pico, its VM platform for hard real- 
time operating systems, and Perc Ultra, a 
VM platform for "soft" or general-pur- 
pose real-time applications requiring Java 
SE support. 

Aonix released Perc Ultra 5.1 last 
month, adding support for a number of 
platforms, including Green Hills Soft- 
ware's Integrity, Mentor Graphics' 
Nucleus, Sysgo PikeOS and Wind River 
Linux. The company's list of supported 
RTOSes already included offerings from 
LynuxWorks, MontaVista and QNX. 

Perc Ultra 5.1 includes several en- 
hancements to security — such as sup- 
port for Java's secure socket and cryp- 
tography extensions — that upgrade all 
security packages to Java 5.0 compatibil- 
ity, the company said. 

The update to Perc Ultra also 
includes an overhauled interface with 
Perc Pico, to address both the hard and 
the soft real-time behavior. Perc Ultra 
now can go to the lowest levels of the 



hardware platform in pure Java, accord- 
ing to the company, eliminating cumber- 
some exchanges between C and JNI, the 
Java Native Interface. That handoff is 
considered a common point of failure in 
mixed-language embedded Java applica- 
tions, the announcement noted. 

Early last month, Aonix announced 
that Perc Pico 1.1, which launched at 
the end of February, was now supported 
for Wind River System's VxWorks on 
Power Architecture, in addition to Linux 
and Windows on x86 hardware. Perc 
Pico can also be used with the Wind 
Rier Workbnech development suite. 
The company's plans for Pico, which is 
based on the emerging JSR-302 specifi- 
cation for safety-critical applications, are 
to make it available for other commer- 
cial RTOSes, but no roadmap has been 
disclosed. 

Perc development tools are available 
without cost when combined with a 
maintenance contract. Perc Ultra is also 
available at a discount when bundled 
with Perc Pico, and license costs for tar- 
get execution and deployment depend 
on the projected volume, and they begin 
at US$25,000. I 



Eclipse DSDP gets a boost 

Three new projects and another initiative 
aim at embedded and mobile developers 



BY P.J. CONNOLLY 

The Eclipse Foundation's been working 
on open-source technologies for embed- 
ded and mobile developers for a while, 
and it expects four new initiatives to 
advance the state of the art. 

They take the form of three projects 
announced April 15, and the addition of 
Windows CE capabilities to an existing 
effort, as part of work on the Eclipse 
Device Software Development Plat- 
form, or DSDP. These join nine other 
projects aimed at addressing the needs 
of embedded systems developers. 

First, the Target Management proj- 
ect now works more closely than before 
with Microsoft's Windows Embedded 
CE, allowing developers to access 
devices through the Eclipse IDE to 
remotely edit, update and delete files in 
the course of creating a Windows CE 
application. 

The Device Debugging project is due 
for its initial release in June as part of 
Eclipse's Ganymede release train. At its 
heart is the Debugger Services Frame- 
work, which is extensible by design, 
allowing commercial toolmakers to cre- 



ate advanced debugger integrations. 
The framework includes a reference 
implementation by Ericsson that sup- 
ports debugging by way of the GDB 
debug engine. 

Another project, Real-Time Software 
Components, is led by Texas Instru- 
ments, and will concentrate on building 
tools to work with highly resource-con- 
strained devices, including digital signal 
processors and microcontrollers. This 
project includes a C -based programming 
model for building applications with C 
and C + + to run on various systems. 

The last initiative, the Target Com- 
munications Framework, is making use 
of contributions from organizations 
including Freescale, Power.org and 
WindRiver to create a lightweight yet 
extensible protocol to standardize com- 
munication between developer tools 
and devices themselves. JTAG probes, 
target agents and target simulators are 
all expected to benefit from TCF, with 
the hope that it will make it easier to 
combine components from multiple 
vendors in multicore and system-on-a- 
chip designs. I 



Instantly Search Terabytes of Text 




♦ dozens of indexed, unindexed, fielded 
data and full-text search options 
(including Unicode support for hundreds 
of international languages) 

♦ file parsers / converters for 
hit-highlighted display of all popular 
file types 

♦ Spider supports static and dynamic web 
data; highlights hits while displaying 
links , formatting and images intact 

♦ API supports .NET, C++, Java, databases, 
etc. New .NET Spider API 



The Smart Choice for 
Text Retrieval® since 1991 
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Contact dtSearch for 
fully-functional evaluations 



♦ "Bottom line: dtSearch manages a 
terabyte of text in a single index 
and returns results in less than a 
second" - InfoWorld 

♦ "For combing through large 
amounts of data," dtSearch "leads 
the market" - Network Computing 

♦ dtSearch "covers all data sources ... 
powerful Web-based engines" 
-eWEEK 

♦ dtSearch "searches at blazing 
speeds" - Computer Reseller News I 
Test Center 

See www.dtsearch.com for hundreds 
more reviews, and hundreds of 
developer case studies 



1-800-IT-FINDS • www.dtsearch.com 




DIFFICULT CODE 
TO UNDERSTAND? 



ANALYZE, DOCUMENT AND 
IMPflOUE COMPLEX SOFTWARE, 3R0 
PARTY OH LEGACY SOURCE CODE. 

Visualize control flow and dependencies 
at system, namespace, class and function 
levels. Detect problems in variable usage, 
task Interactions and source metrics. 
For C, C++ and Java. 

Daufflload a fma eval copy > > > 



Imagixl 

www.imagix.com 



Perforce Fast Software Configuration Management 
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Introducing Folder Diff, 

a productivity feature of Perforce SCM. 
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P*ftei« F^y« DiHf 



Folder Diff fc an imam diva, stdo-hy-sido display Ear comparing rha staFa oF 

any rwa groups of files. 

Use Polder Diff hi quickly determine the differences between files in fodders, 
branches, labels, or y^ur local disk. This is especially useful when 
ptrFormiiio complav cadu mcrgos. 

And wh«>n yai/ve been working o-tttinc r Folder Diff make* il a snap ro 

reconcile and catch up wilh ihe Perforce Server when you get back online. 

Folder Diff is just one of the many productivity laols ihol come with ihe 
PerForc* SCrYl System. 



Perfor 



SOFTWARE 



Download a free copy of Perforce, r» questions 

oskecf, front www.perforcexom. Free technical support ts 
ava Habits throughout yOUr evaluation. 
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Disruptive? Sure, but Paradigm shift boosts quality— and morale 



BY TINA GASPERSON 



Have you ever heard the phrase "subvert the 
dominant paradigm"? It instructs: Upset the 
apple cart of traditional thinking every 
chance you get. Indeed, paradigm subver- 
sion assumes there's always something better hidden 
on the other side of tradition. 

However, paradigm shifts don't come easily. For 
example, when Einstein's theory of relativity came 
face to face with Newton's gravitational theory, Ein- 
stein was flatly dismissed. But, as more scientists 
investigated relativity and discovered its soundness, 
Newton's dominant paradigm was subverted and 
replaced by Einstein's superior theory. These days, 
open-source development is sometimes seen as sub- 
versive, but the process doesn't upset apple carts for 
the sheer fun of it, say proponents. It really is a bet- 
ter way to create software. 

"Open-source software presents the richest exam- 
ple of the changes under way in the structure of our 
economic institutions," say Richard Gabriel and Ron 
Goldman in their book "Innovation Happens Else- 
where." The authors assert that the open-source 
development community is "pioneering the changes 
arising in our society from the transformation from 
industrial to informational economy." 

Today, more and more enterprise software devel- 
opment managers are taking a closer look at how 
open-source projects are run and discovering what 
many developers have known all along: The kind of 
disruption that open-source methodology creates is 
good for company morale and production. It pro- 
duces much higher-quality software that is more 



secure, flexible, scalable and bug- free than software 
developed under the old paradigm. 

For a long time, the dominant paradigm in enter- 
prise software development has been the silo method, 
or what Eric Raymond calls "the cathedral." It com- 
partmentalizes different projects or teams in ways that 
discourage or prevent interaction at a meaningful lev- 
el. Sometimes, even different job functions within the 
same development project are walled off from one 
another, with stages of development forced to 
progress in a strictly linear fashion from silo to silo. 

Requirements analysis is separate from documen- 
tation, from engineering, from testing — and the 
strand of communication between these silos is nev- 
er broad enough. This results in a sluggish response 
to feature requests or performance complaints. Even 
more entrenched is the notion that the individual 
project itself is a silo, wholly separate from the other 
company departments, which often are the intended 
end users of the software. And when the final prod- 
uct is a commercial application, there is even more 
separation between the project and the end users. 

GOODBYE TO SILOS 

Open-source software development eliminates the 
barriers of the silo method, both inside the project 
and between the project and the users. In fact, in 
many ways, the users become part of the project, as 
integral to the process as the coders themselves, 
because the users test prerelease versions, report 
bugs, request features, evaluate upgrades and even 
write documentation. 

The hierarchical distinctions become fuzzier still 
when the developer is also the end user — a common 



circumstance in open-source projects. The silos are 
deconstructed and the project is a hive of activity, or 
in Raymond's terms, a "bazaar." Everyone, even non- 
coders, contributes to the discussion, and all become 
part of a development community where there is still 
a definite process. But that process is much more 
flexible, democratic and, of course, open. 

According to Gabriel and Goldman, sharing code 
inside a company is even easier than doing it in the 
wider world. After all, no licensing is required. Simply 
upload the code to the company file server and you're 
done. Or are you? "It may take a very 



big shift in mind-set to open 
a project's code to developers 
in other parts of the com- 
pany," they write. "In 
fact, one of the biggest 
benefits might be 
increased communica- 
tion between different 
parts of the company." 

BIG CHANGE IS SOCIAL 

This communication 
boost can produce 
benefits that far out- 
weigh the mind-set and 
management adjustments 
that often must precede the 
implementation of open-source 
development methodologies. 
To make a transition from silos 
to hives, or from cathedrals to 

continued on page 38 
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Open-source successes are lessons 



< continued from page 37 

bazaars, managers must realize that this 
is much more a social paradigm shift 
than a technical one. Successful imple- 
mentation will require leadership in 
embracing open-source philosophy and 
casting an open-source vision. Fortu- 
nately, enough a priori evidence exists to 
ease the job of convincing higher-ups 
that bazaar methodology is a good thing. 

For example, and as Gabriel and 
Goldman note in their book, Hewlett- 
Packard has realized the benefits of 
internal open-source development. In 
its paper "Progressive Open Source," by 
Jamie Dinkelacker, Pankaj K. Garg, Rob 
Miller and Dean Nelson, HP said that 
adoption of open-source methods 
addresses, and sometimes eliminates, 
corporate software development chal- 
lenges resulting from departmental silos 
in huge companies, even those with tens 
of thousands of employees. 

Challenges such as project launch 
difficulties, divergent coding standards, 
company reorganizations that see devel- 
opers suddenly moved from one project 
to another, or timelines for existing pro- 
jects squeezed to force completion by a 
new deadline are not merely the 
province of companies that sell software, 
HP asserts. They also exist in large orga- 
nizations that develop applications for 
internal use. 



One of the most ubiquitous open- 
source software development tools is the 
code repository, or version-control 
tracker. Closed-source projects use ver- 
sion control too, but again, those are 
silos that prevent access by concurrent 
or subsequent project groups and teams. 

Corporations that remove silo 
boundaries by implementing a central 
code repository open to the entire orga- 
nization find it is easier to launch pro- 
jects quickly because no one has to 
reinvent the wheel. Over time, the 
underlying code becomes more stable 
and reliable because improvements are 
not discarded after a single use. Rather, 
they are "checked in" to the repository 
and reused, which further shortens 
time-to-market. Meanwhile, develop- 
ers become familiar with the code tree 
and, therefore, take less time to read- 
just to new projects when department 
changes and role reassignments 
become necessary. 

CATCH THOSE BUGS 

On the testing side, bugs become easier 
to find and fix because more people look 
at the code. Open-source projects usual- 
ly have an official means of communica- 
tion: a mailing list or a wiki, or both. 
Large companies can easily implement 
these tools in addition to a code reposi- 
tory, allowing discussion and tracking of 



the project by all interested and affected 
employees. 

With version-control software such as 
Concurrent Versions System or Subver- 
sion, users can work on files simultane- 
ously, check the code back in to the ver- 
sion-control software, and the changes 
are merged overnight. That way, every- 
one working on the project is on the 
same page with the most recent updated 
version of the code. With an open devel- 
opment process, even testers and docu- 
mentation writers will access and update 
the repository with their contributions to 
the project. 

While some challenges are easily 
reduced and others are eliminated by 
adopting an open-source development 
process and using relevant tools, addi- 
tional challenges frequently surface as a 
result of open-source methodologies. To 
a software development manager with 
no background in open source, the idea 
of an open and participatory process 
may sound scary, though intriguing. It's 
easy to see how to maintain control of a 
project in the silo method, but oversee- 
ing the process is less clear in the com- 
munity approach, where images of herd- 
ing cats come to mind. 

One of the biggest hurdles is the polit- 
ical and hierarchical infrastructure that 
exists in every corporation. Managers 
who are used to feathering their nests and 



Many eyeballs mean shadow bugs 



Software testing and quality assurance is an art, and its prac- 
titioners are creative, curious and innovative. Their perfect 
studio? An open-source environment, because it attracts 
those who are gifted at figuring out how best to put an appli- 
cation through its paces: "Let's see what would happen if... " 

At the same time, SQA is serious business. End users, 
whether outside or inside the company, need software that 
simply works. The community is no slouch either when it 
comes to producing code as fault-free as possible. The adage, 
"Given enough eyeballs, all bugs are shallow" (aka Linus' Law), 
was originally posited by Eric S. Raymond, the author of "The 
Cathedral and the Bazaar." 

The vulnerability to attacks of open-source applications like 
the Apache Web server, compared with that of proprietary 
server applications, such as IIS, is debatable. But open-source 
proponents maintain that security flaws in open source get 
found sooner and fixed more quickly, 
diminishing the number of vulnerabili- 
ties. The benefit of having many eyes 
looking at your code is that any 
failure is less likely to hap- 
pen to your least suspecting 
user. Instead, you've got 
people who think it is fun to 
j%j+ break stuff intentionally look 

for the flaws, and when they're 
found, fix them immediately. 

Open-source testing principles can be 

adopted by any company whose management 

is comfortable allowing employees devote a 

portion of their workday to testing software 

and reporting bugs and failures. Staffers within 




the IT department can act as white hat hackers with access to 
prerelease and alpha code, while end users in other depart- 
ments can beta-test and report bugs and other difficulties. 

Brian Behlendorf, CEO of CollabNet, said that it helps to 
make it easy for employees to report bugs they find. This 
means establishing a framework ahead of time, like Mozilla's 
online feedback system, called Hendrix because of that rock 
guitarist's penchant for using sound system feedback as part 
of his music. Hendrix makes it easy for users to shoot off com- 
ments and suggestions, and the page links directly to the more 
formal bug-reporting mechanism. 

Mozilla also offers Litmus, a Web-based open-source QA 
tool used internally but is also available for download and use 
by anyone running Apache, MySQL and Perl. Litmus makes it 
easier for casual users, who would never write a test case, to 
test software, though developers can also submit their own 
test cases. It also acts as a repository for test cases and 
results, with a specially designed interface that simplifies 
viewing and creating reports based on those results. 

Sharing bugs and test results with the entire community is 
beneficial because users can save time by searching to see 
whether a bug has been reported. A good bug and test repos- 
itory that allows Boolean key word searches would encourage 
testers to report their findings and reduce demands on tech 
support. 

In Litmus, any user can browse and select active test runs 
in which to take part and then receive detailed step-by-step 
instructions and guidance. The results are automatically dis- 
played to the community and the QA managers who designed 
the test. The potential for greatly enhanced testing and QA 
output, with far lower costs, is obvious. 

—Tina Gasperson 



plumping their resumes with pet projects 
must get used to sharing their resources, 
developers, and even innovations with 
the new community. As that happens, 
there will still be a tendency for project 
participants to move within traditional 
and longstanding hierarchies, Gabriel 
and Goldman point out. Sometimes this 
is just habitual; other times, the company 
exerts pressure to keep doing things "the 
way we always have." One way to avoid 
that problem is to see that upper man- 
agement and C-Level executives are 
completely sold on open source. 

FINDING THE RIGHT DEVELOPER 

As many companies have discovered, 
another challenge stems from the limited 
pool of developers available even within 
a large organization. In the broad world 
of open-source development, the best 
developer for the project at hand usually 
rises to the top. That's because with an 
almost limitless pool of coders, someone 
with the right combination of desire, 
ability and dedication will emerge. 

Finding the right person to lead a 
development project inside the limited 
scope of a corporation is more difficult. 
And even if the right person can be 
found, it can be tough to retain that per- 
son if a better job offer surfaces. On the 
other hand, with silo elimination, more 
people in the company will understand 
the project and will be able to work 
together to fill in the gaps if the project 
leader needs to be replaced. 

The more or less unstructured 
approach of open-source development 
can be a huge challenge for hierarchical- 
ly driven corporations. Relying on the 
enthusiasm of project participants to 
keep a project on track may not be the 
best solution in a deadline-driven busi- 
ness environment. Fortunately, some 
tools have emerged to encourage best 
practices in an open environment. 

The Apache group created a tool, 
called Maven, that provides a uniform 
build system for Java-based projects and 
generates change logs, dependency lists 
and unit test reports. Fluid is a project 
that aims to "help improve the usability 
and accessibility of community open- 
source projects." Tools like these make 
transitioning a company to an open 
development environment feel more 
secure. While weighing the challenges 
against the benefits is critical before 
undertaking a task of this magnitude, 
open-source development methods 
could usher in the productivity and qual- 
ity increases that every project team 
seeks — whether the project itself is open 
source or not. 

Technology writer Tina Gasperson 
focuses on enterprise applications of 
open-source software. Read her hlog at 
www. gasperson. com. 



FortiusOne® Chooses EnterpriseDB® Over MySQL 

Intelligent mapping solutions developer chose Postgres Plus Advanced Server because of its 
quick and efficient performance, PostgreSQL foundation, and enterprise-class features at an 
affordable cost. 



FortiusOne provides next-generation intelli- 
geni mapping solutions that make |he world's 
geographic data accessible to everyone for 
learning, decision-making, and problem-solv- 
ing. The company is leading the way toward 
the next generation of the web with break- 
through SmartWeb technologies that offer 
unprecedented access to data, easy re mix- 
ing of data for specific needs, and rich infor- 
mation visualization to grow collective knowl- 
edge. 

FortiusOne developed GeoCommons, a pop- 
ular declination web&ile that enables anyone 
to explore, creale, and share geographic 
data and intelligent maps. GeoCommons 
houses a large geospatial -database with 
more than two billion attributes, 35,000 vari- 
ables, and 1,500 datasets. As a fast-growing 
startup, FortiusOne required a low-co&t, 
powerful database solution to run GeoCom- 
mons. 



Overall System Performance Improves 
with EnterpriseDB 

FortiusOne needed to run complex spatial que- 
ries against large datasels quickly and effi- 
cient!/, and found the MySQL spatial exten- 
sions to be far less complete and comprehen- 
sive than PostGIS Postgres Plus Advanced 
Server processes some of GeoCommons' 
database -in tensive rendering requests in 1/30 
of the time required by MySQL. During peak 
hours, GeoCommons processes more than 
100,000 complex requests per hour, requiring 
the true enterprise-class performance and 
scalability delivered by EnterpriseDB. 

Another major factor in FortiusOne's replace- 
ment of MySQL with Postgres Plus Advanced 

Server was I he company's need for advanced 
paMJIioning, custom triggers, and functional in- 
dexing. Postgres Plus Advanced Server's ad- 
vanced partitioning capabilities instantly en- 
abled linear performance, even wilh tables 



(£ EnterpriseDB occupies that crucial tnickJIe ground 
between MySQL and Oracle®. [It] is priced competi- 
tively with MySQL, but provides significantly better 
performance and advanced features you just don't 
find in most open source databases. 11 

- Chris Ingrassia, Chief Technology Officer, FortiusOne 



Challenges with MySQL 

Originally, Forhu&Gne selected MySQL; how- 
ever when FortiusOne was preparing to 
deploy th& first public beta of GeoCommons, 
they encountered major performance road- 
blocks. MySQL's limited and incomplete spa- 
tial support dramatically impacted Geo Com- 
mons' performance. Additionally, MySQL was 
unable to deliver en lerp rise- class features 
and performance at an affordable price. Fi- 
nally, ForllusOne preferred to support an 
open source-based technology. 

An Enterprise-Class Solution Based 
on Postgres 

The PostGIS spatial extensions to Postgr- 
eSQL played a key role In FortiusOne's selec- 
tion of Postgres Plus Advanced Server and 
dramatically improved performance. Post- 
gres Pius Advanced Servers PostgreSQL 
foundation guaranteed the reliability and sta- 
bility that FortiusOne required, at a small 
fraction of the cost of traditional enterprise 
databases. 



having billions of rows Since migrating Geo- 
Commons from MySQL to Postgres Plus Ad- 
vanced Server, FortiusOne has improved over- 
all system performance by 60%. 

Quality Technical Support 
EnterpriseDB offers round-the-clock, enier- 
prise-class technical supporl. Customers re- 
ceive rapid responses and halpful solutions 
from on-tall developers, providing a compel- 
ling alternative to other enterprise databases. 

What's Next? 

FortiusOne is extremely pleased with the re- 
sults it has received from EnlarpriseDB and 
Postgres Plus Advanced Server, Open source 
software from EnterpriseDB has indeed pro- 
vided FortiusOne with a solution to its business 
challenge: to run complex queries quickly and 
efficiently, at an affordable price. When con- 
sidering database options for fulure products, 
EnterpriseDB will be at the top of FortiusOne's 
list. 
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Since switching to 

EnterpriseDB, overall 

system performance has 

improved by 80%. 



Enterprise DB 



About EnterpriseDB 

EnlarpriseDB is the world's leading 
provider of enterprise-class prod- 
ucts and services based on Postgr- 
eSQL, tha world's most advanced 
open source database. The 
company's Postgres Plus products 
are lightning-fast, massively scal- 
able, and extremely reliable, 
making them ideal for high-volume, 
mission-critical applications. Enter- 
priseDB has offices throughout 
North America, Europe, and Asia. 
The company was founded in 2004 
and is headquartered in Edison, 
NJ. 

For more informal ion and to down- 
load Postgres Plus 
Advanced Server, visit 
www.enterpri&edbrCom 



EnterpriseDB Corporation • 499 Thornall Street • Edison, NJ 08337-2210 * (732) 331-1 300 • sales^enterprisedb.com 
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Google ascends into cloud 

To get a sense of Google's size, consider this: If you google "Google," 
you get 2.1 billion search results. Google "God," and you get merely 
486 million. Now, Google wouldn't claim to be four times more popular 
than the Almighty, of course, but perhaps the company is moving into 
His lofty neighborhood: the cloud. 

Recently, Google placed two big bets that computing is indeed mov- 
ing up into the cloud. First, it is partnering with Salesforce to put its 
Google Apps portfolio onto Salesforce s SaaS platform. Second, it offers 
a preview release of App Engine, which will let software developers cre- 
ate applications and host them on Google's massive infrastructure. 

BusinessWeek called this cloud strategy "Google's Next Dream" in a 
Dec. 24, 2007, cover story, showing that this capability affects far more 
than information technology departments. When executed properly, 
cloud computing saves enterprises the hassle of figuring out how many 
servers they need to provision, how much space they have or how much 
electricity they can afford. 

While computing power as a service isn't a new notion, modern uber- 
companies such as Google are in the best position to be the computing 
infrastructure for others. Another big player is Amazon.com and its Elas- 
tic Compute Cloud (EC2) service. Salesforce.com also has its platform, 
The Force. 

Just as important as being able to scale up computing resources as 
needed, an enterprise also must be able to scale down. This avoids the 
situation where different departments in an organization hoard servers 
or storage in case they need them, even though they haven't used such 
storage in months. In today's ultracompetitive economy, being able to 
scale down is one of cloud computing's most compelling boardroom 
arguments. 

To be sure, some of those clouds look dark and threatening to others. 
Many organizations are rightfully skittish about yielding control over 
their computing resources to an outsider — any outsider. Google's vaunt- 
ed "Don't be evil" pledge does not reassure skeptics, who are worried 
about how well Google, or any other cloud-computing provider, would 
safeguard their data. 

Even so, enterprises trust their information to all sorts of people out- 
side their walls — contractors and partners, for example — so the prece- 
dent is there for all but the most critical information. And even there, if 
cloud computing delivers convenience and value, then the market will 
embrace it, whether it's from Google, Amazon or anyone else. 

Multicore s supporting cast gathers 

The trouble with covering news is that one is so often focused on the 
freshest new thing out there that it's easy to forget that the rest of the 
world is catching up with fresh and new. We've covered the growth of 
multicore processor technology over the last few years, and having done 
so, we're glad to see that education and tooling are beginning to ride the 
multicore wave. 

Anyone who thinks the challenges of programming for the new pro- 
cessing platforms are trivial is kidding himself, in no small part because 
the options are numerous, and it's going to take time to sort out what 
works and what doesn't. That it's only taking a couple of years for uni- 
versity computer science departments to catch on to the demand for 
multicore-specific education is a tribute to what is ordinarily a slow-mov- 
ing beast. 

Quite simply, not all code can or ought to take advantage of multi- 
core technology. The trick will be to identify those parts of one's soft- 
ware portfolio that can achieve the most by a rewrite, what has to be 
rethought from the ground up, and what can be left alone. No consul- 
tant or coursework will be able to decide that for a business, and com- 
panies would be wise to ensure that their developers take advantage of 
today's advances in tooling, rather than wait for something better to 
come along. I 



Sloppy apps don't help cause 



Connolly's Take 



Not too long ago, the BBC intro- 
duced a new bit of software — the 
iPlayer, which is supposed to be the 
Beeb s next-generation media player. It's 
pretty slick and, from what I understand, 
quite popular. So popular, in fact, that 
British ISPs are complaining that the 
iPlayer "uses too much bandwidth." 

I love hearing network 
providers who complain about 
this sort of thing, because I've 
heard so many of them 
promise absolute snake oil 
over the years. I remembered 
the executive who swore that 
his company would offer cus- 
tomers a handset-based 
56Kbps data service by 2001 
or 2002 "at the latest." Well, 
that didn't happen until 
Christmas 2005, according to my notes. 

For rich Internet applications to suc- 
ceed, they can't be created with the 
assumption, as so many are, that one has 
a LAN-grade Internet connection. 
Heck, for many mobile users, their link 
is the equivalent of a dial-up connection 
with speeds right out of 1994. 

The simple fact is that the people 
who own the pipes are appalled at the 
idea that they might have to reinvest in 
equipment because of customer 
demand. I guess I really am quixotic in 
my belief that oligopolies, such as 
telecommunications, might even be 
worse than monopolies. At least with a 
monopoly, there's no illusion of choice. 

If I took up tilting at windmills, my 
first target would be Web applications 
that don't behave well over the Web. My 
two leading offenders at this moment 
are a pair of popular applications on 
media sites. I'm referring to Flash and 
Print Article. 




Adobe System's Flash makes sites 
such as YouTube possible, and without it, 
I know my day would be less joyful. But, 
then again, I like to see pandas sneeze. 

The problem with Flash is that so 
many sites use it in ways that suck up my 
computer's time and resources even 
when I'm not interacting with the page. 
On the other hand, Print 
Article is seemingly quite sim- 
ple, but either an orphan or a 
bastard, depending on which 
newspaper's online edition I'm 
reading. Printing a hard copy is 
often an effort that only a col- 
lector of weird news clips 
could tolerate. In both cases, 
we don't know who's responsi- 
ble for the ill-behaved so-and- 
so, and nobody seems interest- 
ed in taking charge. 

These two tools cause 90% of my 
Web-related stress. Most of the rest 
comes from wondering whether the 
plane ticket I'm about to buy will cost 
more or less than it would have an hour 
ago. But that's another discussion. 

I don't know why the media seem to 
have so much trouble delivering Web 
content. Is it that their developers and 
IT staff are incompetent, or are they 
simply so focused on one part of a site 
that they don't care how people actually 
use their work? 

The point of this rant is simple 
enough: If you're writing a Web applica- 
tion and don't test it over the "real" 
Internet, you might as well stay home. 
Even if that app sees widespread use, 
people will curse your name whether 
they know it or not. At least I will. I 

RJ. Connolly is executive editor of SD 
Times. 



Business intelligence 
platforms, favored by 
ClOs, keep thriving 

The market for business intelligence platforms will 
grow even during an economic slowdown, accord- 
ing to new research from Gartner. Having found 
that Bl is currently the top priority of ClOs, the 
research firm expects Bl budgets to expand, albeit 
the technology is becoming less expensive and 
easier to implement. 

The worldwide revenue for Bl platforms is 
forecast to grow by a little more than 11% 
between 2007 and 2008, and at a compound annu- 
al rate of 8.1% through 2012. Such growth would 
add almost $2 billion to the projections for those 
years and raise the total value of the market to 
US$7.7 billion, notes the Gartner report, titled 
"Forecast: Business Intelligence Platforms, World- 
wide, 2007-2012." The report is available now. I 
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The future of quality hinges on productivity 



Managers push quality on develop- 
ers the way parents push vegeta- 
bles on their children. Given a choice, 
most kids won't touch a lump of 
spinach sitting on their dinner plate. 
But if you blended pureed spinach into 
the chocolate brownies for which they 
always reach, your children would get 
the intended nutrients without your 
ever having to utter, "Eat 
your vegetables." 

During the past 20 years in 
the software industry, quality 
initiatives have come and 
gone, along with countless at- 
tempts to find a silver bullet 
tool that would deliver quality 
with the click of a button. 
Unfortunately, there is no sil- 
ver bullet. Some ideas have 
worked in theory, but few have 
succeeded in practice. 

The major problem is that when 
managers try to improve quality, they 
unintentionally pile more work on 
time-starved developers. Quality tasks 
are introduced in such a way that they 
require developers to adjust their tried- 
and-true work flow to take on addition- 
al work. 

Not surprisingly, this usually isn't 
well received. If developers don't 
believe that learning and applying this 
new practice will be worth the effort, 
by relieving them of tedious tasks to 
allow them to focus on the creative 
work they enjoy, the practice eventual- 
ly will decay. The developers probably 
won't reject the new initiative outright; 
they will simply do it less and less until 
they stop altogether. 

We push these well-meaning quality 
initiatives without considering their 
effect on productivity. Quality increases 
productivity, we assume, but that's not 
the case. If you want to introduce a qual- 
ity initiative, do it in a way that doesn't 
disrupt or slow the normal work flow. 
Otherwise, there's little chance of 
achieving a sustainable quality process. 

A good work flow can make or break a 
quality initiative. For example, assume 

Figure 1 



Figure 2 
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that someone delivers a 
mandate: "All code must 
be peer- reviewed." If the 
development manager 
responsible for implement- 
ing the peer code review 
interprets that as meaning 
"no developer can check in 
code before it is 

reviewed," he 

is creating a 

tremendous 

roadblock in 

the developers' 

natural work 

flow This is a 

prime example 

of a quality ini- 
tiative that would 

productivity. 

This process is illustrated 
in figure 1: 

Now, the developer must do a lot of 
extra work before adding code to source 
control. Even with an automated infra- 
structure managing key tasks, the devel- 
oper has to remember to initiate the 
process that identifies code ready for 
review and enter a description of the 
intended modifications. 

Without an automated infrastructure, 
the developer also must identify the 
code that needs to be reviewed and 
organize it into logical packages. He has 
to distribute the review packages to the 
appropriate reviewer, notify the review- 
er, and monitor the review status until 
closure — and perhaps even remind the 
reviewer of the pending review. 

This is tedious and time-consuming 
work. As a result, developers will prob- 
ably try to follow this process initially, 
and project progress will likely slow to 
a crawl as a result of the additional 
work and the new roadblock. Once 
developers realize that, reviews will 
become less frequent. Eventually, peer 
code reviews will be nothing more than 
a bad memory. 

A better approach would be to inter- 
pret the mandate as, "I don't want to 
have unreviewed code in any applica- 
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tion when it goes to production," which 
would allow code review to occur after 
check-in. This means that code in the 
source control system will not be 100% 
reviewed all the time. Code will not be 
reviewed the minute it is checked in; it 
might take several days. But this is a 
small trade-off for the more productive 
work flow that results. 

By implementing automation be- 
tween the developer and his code check- 
in, the mandate becomes much less dis- 
ruptive to development. 

The more tasks that get automated, 
the better. The burden on the develop- 
er is reduced because he's not forced to 
perform additional work; He merely 
checks in the code as he normally 
would. The only added work for the 
team would be the actual peer review — 
a creative process that cannot, and 
should not, be automated. 

This less disruptive process is illus- 
trated in figure 2: 

What's important is that this type of 
setup actually doesn't increase the 
amount of work, but rather it reduces 
it. How? Because the code review actu- 
ally enables early error detection. That, 
in turn, reduces the length and difficul- 
ty of debugging, which typically con- 
sumes a tremendous amount of devel- 
opment resources. 

The interesting thing here is that the 
greatest value is achieved by 
focusing on productivity, not 
quality. Focus on quality 
without considering produc- 
tivity and you likely will end 
up with minimal to no quali- 
ty improvements, some 
slipped schedules, and a dis- 
gruntled team. But focus on 
productivity by helping the 
team work smarter, and the 
team will deliver better soft- 
ware faster. I 

Adam Kolawa is the co- 
founder and chief executive 
officer ofParasoft, which sells 
software testing tools. 
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Extending your SOA between enterprises 



Not until the advent of Web services 
have we had a widely accepted stan- 
dard and enabling technology that 
allows us to access all types of systems 
through a common services interface. In 
fact, we may be at a point where more is 
understood about the technology than 
the ways in which it fits into the enter- 
prise or value chain. Organizations seem 
to adopt Web services without thought 
of strategic fit and function. Adoption is 
only half the battle. 

Access to services implies that busi- 
ness processes existing in and between 
companies can be coupled at the ser- 
vices layer, meaning that services are 
shareable (if allowed) among the partner 
organizations. Since those services are 
always visible, information bound to 
them is produced and consumed in real- 
time. In essence, you create a virtual set 
of applications that exists between trad- 
ing partners that allow them to function 
like a single entity and, thus, service 
common business processes as if they 
existed in a single company. 

How do you begin sharing your SOA? 
First, break the SOA down into several 
basic components before attempting 
integration. Those include private and 
public services, private and public 
processes, and data and abstract data. 



Private and public services are cre- 
ated for use within your organization (pri- 
vate) and to share with your partner or- 
ganizations (public). Understanding 
which services to make public or private 
requires some analysis. 

Public services are redundant within 
your trading community, such as logis- 
tics, inventory or billing. By 
exposing those services to out- 
side organizations, you allow 
them to share the service and 
avoid their own development 
costs. You also allow them to 
leverage a shared service as a 
point of integration and a 
binding point for common 
processes. 

There are a few key crite- 
ria for selecting services that 
are public: The service should be redun- 
dant to two or more entities. The service 
should be unique to the trading commu- 
nity; otherwise it makes sense to look for 
other public services to solve the prob- 
lem. And the service should offer ease of 
integration, including the ability to dis- 
cover semantics as well as interfaces. 

Private and public processes pro- 
vide orchestration of services, binding 
them into a business process to drive 
information movement and invocation of 




services. You may consider processes or 
orchestrations as a group of services gath- 
ered together to solve a particular busi- 
ness problem — an overriding control 
mechanism, if you will. 

There are three types of processes to 
visualize enterprise and cross-enter- 
prise processes: private, public and spe- 
cialized. 

Private processes exist at 
the intracompany level, let- 
ting the business user define 
common processes that span 
only systems that are within 
the enterprise and not visible 
to trading partners or to com- 
munitywide processes. 

Public processes exist 
between companies, and they 
consist of a set of agreed- 
upon procedures for exchanging infor- 
mation and automating business pro- 
cesses within a community. This is the 
core notion of intercompany SOA, since 
it's really the concept where we create 
intercompany orchestrations. 

Specialized processes are created for 
a special requirement, such as collabora- 
tion on a common product development 
effort that only exists between two com- 
panies and has a limited life span. 

The notion of data and data 



abstraction lets us think about collec- 
tions of data or services as abstract 
entities, thus represented in a form 
that is most useful to the integration 
server or the application integration 
architect. This provides for the group- 
ing of related pieces of information, 
independent of their physical location 
and structure, as well as defining and 
understanding what meaningful opera- 
tions can be performed on the data or 
services. 

We need to separate the implementa- 
tion from the abstraction itself. This al- 
lows us to change the internal represen- 
tation and implementation without 
modifying the abstract behavior and lets 
people use the abstraction for intercom- 
pany SOA without having to understand 
the internal implementation. 

It's not a matter of when intercompa- 
ny SOA will become a reality. The evolu- 
tion is already under way. You either can 
get good at it now by creating a more 
competitive and responsive business or 
play catch-up later. 

Understand your own value and work 
directly with your partners to ensure 
that everyone is adjusting their way of 
thinking. The goal is to build shareable 
services and processes that automate 
your business, as well as processes 
between businesses. I 

Reach analyst David S. Linthicum at 
david@linthicumgroup. com. 
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Tacking toward agility 



If you put a newcomer on a sailboat, 
give him the tiller and the mainsheet, 
and tell him to sail upwind, he probably 
would sail backward. Sailors never tire of 
talking about making boats go faster and 
the million variables that contribute to 
speed. However, you don't need to know 
anything about rigging tension and sail 
shape to get moving. You just need to 
know some basic constraints and rules 
about positioning the boat and the sail 
relative to the wind. 

Similarly, for all the columns we write 
about fine-tuning approaches to design 
and architecture, tool choice and process 
improvement, there are only a few crucial 
things to ensure you move forward in soft- 
ware development. Sure, there are teams 
that seem to do everything right: daily 
stand-up meetings held as people do 40 
minutes of cardiovascular exercise, pair 
programming while sitting with perfect 
posture, flossing after every code check- 
in, and so on. Most of us, though, struggle 
with less-than-perfect teams, hoping that 
the things on which we are skimping 
aren't critical. These things define our cul- 
ture and determine the type of program- 
mers who are likely to end up working 
with us over the long term. 

Professional development begins with 
source control. It's astonishing to me, but 




I sometimes encounter teams that use 
FTP and e-mail to move development 
files around. This is simply unacceptable 
and will immediately "flip the bozo bit" in 
any kind of skeptic. 

In recent years, the OSS Subversion 
software has become very common, but 
I've recently become skeptical that it's a 
good match for newcomers to 
version control. While I've 
never lost any data in Subver- 
sion, it seems to get into faulty 
states ("wedged") fairly often, 
especially when manipulating . 
large numbers of files, which J 
is done often when introduc- I 
ing a team to source control. 
While it's generally easy for an 
experienced user to fix a Sub- 
version error state, to a new- 
comer it can be off-putting. There are 
many choices, but I would suggest 
SourceGear Vault, Perforce and Visual 
Studio Team System as alternatives. 

VSTS also has integrated task tracking, 
and I've come to see software-based task 
tracking as another vital tool, at least for 
teams that are not wholly "extreme" (the 
full Extreme Programming regimen is 
communal to a point where software would 
simply get in the way). In a team with good 
tools, there is no such thing as a routine fea- 
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ture — "boilerplate" code is factored into 
frameworks, libraries and components. 

Programmers should spend their 
time on challenging features. Those 
invariably have subtleties — areas where 
the programmer can be flexible and 
areas that demand they toe the line. This 
conclusion that fine-grained task man- 
agement is almost universally 
required is one that I've 
reached over the years with 
great hesitance, because indi- 
vidual programmers can so 
often succeed in developing 
small utilities with a fraction 
of the guidance. Unfortu- 
| nately, one of the most com- 
mon mistakes in process 
improvement is letting up on 
fine-grained task manage- 
ment too soon. 

Task tracking cannot be done with 
Excel, that favorite of casual managers. 
Not only must dependencies between 
tasks be tracked, but also — and most 
important — tasks must progress through 
a defined life cycle, even if one as simple 
as "open/in-progress/resolved/closed" 
("open" and "closed" being states 
defined by managers and "in-progress" 
and "resolved" being states defined by 
the developer). I like VSTS' task track- 
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ing, which integrates with Outlook, but 
also commonly choose Atlassian's JIRA. 

Realizing that I have space for only 
one more topic, I am tempted to write 
about modularization, an almost perfect 
gauge of productivity. But modularity 
can be difficult for managers to judge, so 
instead I'll speak of the relatively modern 
practice of continuous integration (CI). 

CI can be summarized as "daily con- 
tributions that never break the build" — a 
system that avoids the common "two 
steps forward, one step back" chaos of 
teams that work on their features in isola- 
tion, only to find that integrating them is 
as much (or more) work as building them. 
I somewhat surprised myself by choosing 
CI over unit testing, but CI invariably 
leads to unit testing, since manually vali- 
dating the build gets old quickly. 

There are many CI servers, both com- 
mercial and open source. I tend to use 
CruiseControl and its derivations 
(CruiseControl.NET, CruiseControl.rb), 
but that's more out of familiarity than any 
objective evaluation of the alternatives. 

Version control tells you who con- 
tributed what and when, task manage- 
ment should tell you the "why" of con- 
tributions, and CI confirms that you're 
not moving backward. You might not 
win races, but you'll be developing. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer. Read his hlog at 
www. knowing, net. 



Parallel programming with CUDA 



The acceptance of parallel program- 
ming is slowly growing among devel- 
opers. This acceptance, or at least aware- 
ness, is being driven by the advent of 
multicore systems. As fellow columnist 
Larry O'Brien and I have discussed many 
times, the day is soon coming when most 
users will have four cores on their desktop 
and they will wonder why their apps are 
not running any faster. Then, client-side 
developers will start being held responsi- 
ble for the fact that they still have not 
learned data and functional decomposi- 
tion and begun designing apps in terms of 
threads. That's how things stand now: Par- 
allel processing has to do with multicores 
unless you're a server kind of program- 
mer, in which case it's multiple cores and 
multiple processors. 

However, another segment of the 
computing world lives and breathes con- 
currency and parallel programming — 
scientists and researchers who perform 
simulations, massively parallel analyses 
and other tasks characterize various sci- 
entific niches. And, like them, there are 
also the Wall Street analysts who thrive 
on the automated search for trades that 
are easily repeatable and can make small 
profits quickly. 

If you're like me, you tend to think of 
the scientists and analysts as having a 
different complement of hardware to 



run their software. You think of them 
having sprawling clusters running spe- 
cialized software that generates huge 
data sets, which are visualized with 
advanced modeling packages. That 
model, while certainly valid, is giving 
way to a new one that — surprise — uses 
standard PC hardware. 

That approach gives the lion's share of 
computing to the graphics 
card. We might think that dual 
quad-core workstations with 
eight execution paths are 
something terrific (and I do 
think that), but to developers 
accustomed to programming 
graphics cards, eight paths is a 
distinctly inferior proposition. 
They're used to 32, 64, even 
128 paths, all working at once. 
The number of simultaneous 
threads is actually much higher than 128 
because graphics cards make it easy to 
have thousands of threads on the fly 
using different parts of the pipeline — all 
under the control of the hardware. In 
other words, a decent graphics card can 
deliver astounding parallel capability. 

If you regularly read programming lit- 
erature, you've surely seen the rare arti- 
cle here and there that discusses harness- 
ing graphics processors for non-graphics 
use. But a quick perusal suggests that the 
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applications are so narrow and special- 
ized that you would never consider them 
a viable option for your desktop apps. 

However, a new program from Nvidia, 
called CUDA (Compute Unified Device 
Architecture), seeks to change that per- 
ception. Going to the Web site at 
www.nvidia.com/cuda, you will find a 
wealth of free tools to get you up to speed 
on how to exploit your graph- 
ics card — which needs to be 
any recent Nvidia card that's 
not at the entry-level end of 
the price spectrum. For pro- 
fessional reasons, I've recently 
been looking at CUDA and 
was surprised to see how this 
programming niche has come 
together. 

In essence, you download 
a CUDA driver for your card. 
(I am using an Nvidia Quadro FX 370, a 
card that retails for well under US$200.) 
Once it's installed, you download the 
SDK, which is primarily oriented to C 
programming. It first contains a compil- 
er driver that separates out the CUDA- 
specific calls. It then hands the rest of 
the program to the regular C compiler to 
handle, while it converts CUDA code to 
binaries for the graphics card. (CUDA 
supports Windows via Visual Studio 
.NET; many flavors of Linux via gcc; and 



just recently it added Mac OS X.) 

When you run the resulting program, 
the calls are made to the CUDA code, 
which runs on threaded floating-point 
calculations on the Nvidia card. Nvidia 
also provides libraries for typical scien- 
tific computing needs: BLAS, FFT and 
the like, along with a plug-in for acceler- 
ating Matlab. The company's sample 
programs include more straightforward 
business applications, such as computing 
the Black-Scholes pricing for options, 
Monte Carlo simulations and more. 

This form of computing is often 
referred to as general-purpose graphics 
processor unit (GPGPU) programming. 
It's an effective way of speeding up calcu- 
lations, sometimes on the order of 100 
times over standard CPU-only PCs. 
CUDA makes it easy to program by allow- 
ing access to GPGPU via straightforward 
C statements, rather than imposing famil- 
iarity with vertex shaders and other graph- 
ics hardware features that most develop- 
ers don't know or care about. Note that 
the increase in performance because of 
CUDA does not flow entirely back to your 
application. The rest of your code is oper- 
ating more slowly, so only the parts of the 
program that were previously calculations 
obtain a performance lift. Nonetheless, on 
many applications, that can be a substan- 
tial improvement. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his hlog at 
binstock. hlogspot. com. 
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WE ALL KNOW THAT AJAX stands 
for "Asynchronous JavaScript and 
XML." But what does AJAX really 
mean? For many developers, it means 
"Rich Internet Experience Through a 
Browser," but "RIETAB" is an awkward 
name. Let's just stick with AJAX. 

Sure, AJAX implies that JavaScript is 
used to invoke function calls, and those 
function calls use XML to deliver con- 
tent using the XMLHttpRequest object. 
But it doesn't have to be that way. As 
long as AJAX is implementing JSON — 
the JavaScript Object Notation — the 
actual use of XML is 100% optional. 

In fact, one could argue — and I've 
heard people make this case — that AJAX 
doesn't even have to use JavaScript. Any 
scripting language that can run within 
the browser can do the trick. How about 
Asynchronous VBScript and XML? I 
don't see why you couldn't have an 
AJAX-like rich Internet experience, run- 
ning in the browser without JavaScript 
and without XML. 

So, we've eliminated the XML from 
AJAX and potentially eliminated the 
JavaScript from it as well. I guess the 
only important element is that our RIA 
experience is asynchronous. Or, to look 
at it the way suggested earlier, the truth 
is that our real goal is to do RIETAB 
development, and everything else is 
unimportant. — Alan Zeichick 

MOST END USERS wouldn't know a 
development framework if it bit them in 
the face. But an awful lot of Photoshop 
users are finding out the hard way that 
frameworks matter. 

That's because Adobe Systems 
announced plans to release a native 64- 
bit version of Photoshop for Windows as 
part of Creative Suite 4, with the Mac 




SHORT TAKES 



OS X 64-bit version 
on hold until the CS 
5 release train. 

The reason for 
that goes back to two 
development frame- 
works for Apple's 
platform, Carbon and Cocoa. I've cov- 
ered Mac OS X since Darwin was a 
gleam in an engineer's eye, and I've nev- 
er heard of a practical difference be- 
tween the two until recently. 

Apple decided last year to shelve its 
plans to make Carbon a 64-bit frame- 
work and focus its energy on Cocoa's 64- 
bit implementation. But that move real- 
ly put Adobe in a pickle, because its 
flagship image manipulator and core 
plug-ins amount to roughly a million 
lines of Carbon code, much of which has 
to be rewritten for Cocoa. 

Even Adobe can't pull off a miracle 
of that sort in the time frame for CS4, 
and Adobe's John Nack, the product 
manager for Photoshop, seems to be 
hedging his bets on having it 64-bit- 
native for CS5. Enzo Torresi was right: 
You can create the universe in six days, 
but only if you're starting from scratch. 
— RJ. Connolly 

PUTDOWNS AND ZINGERS flew back 
and forth April 3 in Silicon Valley as the 
heads of SAP and Salesforce debated 
their respective business models. 

The Computer History Museum in 

Mountain View, Calif., managed to hold 

more than 500 attendees — as well as the 

egos of Salesforce CEO Marc Benioff and 

p ■ jh SAP chairman Has- 

so Plattner — with 

the two debating 

whether licensed 

software would rule 




the software world, or if software-as-a-ser- 
vice would sweep all before it. 

The boss of upstart Salesforce, at 
US$749 million in annual sales, chal- 
lenged heavyweight SAP, at $16 billion, 
to do better with its license model than 
Salesforce's delivering SaaS over the 
Internet. Benioff even offered to help 
SAP develop its applications on Sales- 
force's platform. 

"The world is changed. The Internet 
is the platform of the future," Benioff 
declared. 

No dice, answered Plattner. SaaS soft- 
ware "would have to be pretty generic" to 
appeal to as many customers as Sales- 
force plans to serve, he added. And enter- 
prises prefer licensed software such as 
SAP's to use as a base for customization. 

"Let me give you some advice," the 
silver-haired Plattner lectured Benioff, 
"but you might not take it because you 
are younger: Don't overestimate your 
platform." — Robert Mullins 

AN ENTERPRISING DEVELOPER 

has found a way to break Google's App 
Engine lock-in. Chris Anderson, the co- 
founder of the Grabb.it MP3 blog ser- 
vice, devised a way to run App Engine 
applications on Amazon's EC2. Better 
still, he's made his work 
into an open-source 
project. Good for him. 
Weren't Web services 
supposed to be the 
answer to proprietary platforms? Ander- 
son's solution, called AppDrop, is a con- 
tainer for applications created using the 
App Engine SDK. Users develop appli- 
cations as they normally would but 
deploy them to EC2 instead of Google's 
infrastructure. Fight the power. 

— David Worthington 




BUSINESS BRIEFS 




Google will sell off Doubleclick's Performics search marketing 
business to avoid what the company called a conflict of interest 
for search results. In addition, 300 jobs were cut from Dou- 
bleclick's staff, as Google eliminates redundancies from the 
acguisition of Doubleclick in March. The job loss represents 
about one-quarter of Doubleclick's staff . . . Microsoft has com- 
pleted its acquisition of Danger, a maker of mobile devices. Dan- 
ger created the Java-based operating environment used in the T- 
Mobile Sidekick. Microsoft executives said that Danger's benefit 
is its real-time, mobile messaging and social networking applica- 
tions . . . IBM signed a definitive agreement to buy FilesX, a pri- 
vately held storage software company that focuses on continu- 
ous data protection and application-recovery software. IBM said 
the deal would enable the company to offer an end-to-end data- 
protection product for laptops, remote or branch offices, and dis- 
aster-recovery sites . . . EMC plans to acquire data storage and 
protection specialist Iomega for US$213 million, as EMC seeks to 
increase its market share in small-business markets with 
Iomega's brand name and products. Iomega will become the core 
of EMC's new Consumer/Small Business Products Division, 
according to EMC. The division will include EMC's Retrospect 



backup software and Lifeline digital content management prod- 
uct .. . CA has filed a motion in its copyright infringement case 
against Rocket Software that claims the source code for the 
Rocket DB2 Log Analysis Tool and other products is "virtually 
identical" to code written by CA programmers. CA is seeking 
damages of at least US$200 million, and the company said that 
Rocket obtained the source code for the products by hiring pro- 
grammers and developers formerly employed by CA . . . Intel has 
created the Capital China Technology Fund, its second China 
investment fund. The US$500 million fund will be used for 
investments in wireless broadband, technology and media to 
help expand technology markets in China. 

EARNINGS: Compuware said revenue rose for its fourth quarter, 
which ended March 31, to US$337 million from $313 million for 
the year-ago quarter. That total broke down as follows: software 
licenses, $100 million; maintenance, $126 million; and profession- 
al services, $111 million . . . Ounce Labs said its quarterly sales 
tripled from the previous quarter, giving the company nine con- 
secutive quarters of growth. Ounce did not disclose earnings, 
however, because it is a privately owned company. I 



EVENTS CALENDAR 



CommunityOne 

San Francisco 

SUN MICROSYSTEMS 

developers.sun.com/events/communityone 



May 5 



JavaOne 

San Francisco 

SUN MICROSYSTEMS 

java.sun.com/javaone/sf/index.jsp 



May 6-9 



VSLive Orlando 

Orlando, Fla. 
1105 MEDIA 

www.vslive.com/2008/orlando 



May 12-16 



IDUG2008 May 18-22 

Dallas 

INTERNATIONAL DB2 USERS GROUP 

conferences.idug.org/na 



BREW 2008 

San Diego 
QUALC0MM 

brew.qualcomm.com/brew/brew_2008 



May 28-30 



RailsConf 

Portland, Ore. 
O'REILLY MEDIA 

en.oreilly.com/rails2008 



May 29-June 1 



IBM Rational Software June 1-5 
Development Conference 

Orlando, Fla. 
IBM RATIONAL 

www-306.ibm.com/software/rational/events/rsdc2008 

TechEd 2008 Developers June 3-6 

Orlando, Fla. 
MICROSOFT 

www.microsoft.com/events/teched2008/developer 
/default.mspx 



Apple Worldwide 
Developer Conference 

San Francisco 
APPLE 

www.developer.apple.com/wwdc 



June 9-13 



TechEd 2008 IT June 10-13 

Professionals 

Orlando, Fla. 
MICROSOFT 

www.microsoft.com/events/teched2007/itpro/default.mspx 



eBay Developers 
Conference 

Chicago 
EBAY 

pages.ebay.com/devcon 



June 16-18 



USENIX 2008 

Boston 
USENIX 

www.usenix.org/events/usenix08 



June 22-27 



ESRI International 
User Conference 

San Diego 
ESRI 

www.esri.com/events/uc/index.html 



August 4-8 



Software Test & September 24-26 
Performance Conference 

Boston 
BZ MEDIA 

www.stpcon.com 

EclipseWorld 2008 October 28-30 
Reston, Va. 
BZ MEDIA 

www.eclipseworld.net 

For a more complete calendar of U.S. software 
development events, see www.bzmedia.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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OnTime 2008 

by Sxosof t 

Now in Its Slh major release , 
award- wfr.nl tig OnHnie gives 
project n^anagen, develop ors, 
testers, and help desk staff Ifte 
tools needed to collator aHvely 
ship software on Kme. 




for Windows, Web & VS.Net • Hosted or Installed 

Simple enough for small dev teams . flexible enough for Agile, Scrum ond Extreme methodologies, 
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Track Everything 

Trqck everything from bugs 
to software requirements, 
team member tasks, and 
more, 3AQ-degree visibility. 



Customize 

*/\, Unlimited custom fields, 
customize all field names, 
and decide when fields are 
visible r edftoble or required, 
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Project Wiki 

Finally, one place to 
collaborate on projects 
In a clean, organized, 
hierarchical structure. 

Workflow 

Define a hyper -fast, 
lightweight, agile workflow 
or a robust process- 
enforcement system. 
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Customer Portal 

Stay connected with 
customers through OnTime's 
unique portal solution. 



800.653.0024 

Our U.S. and International 
sales teams look forward 
to answering your questions 
or setting up a live demo. 
6:00 a.m. - 5:00 p.m. MST 




Security 



© 



Secure every aspect of The 
system by project user 
rales, and even fields. 



Starts at: FREE 

Single -user licenses of 
OnTime are always free. 
Starts at $395 (Express) L 
$795 (Pro), 5t1e Licensing 
available. 
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Help Desk 

Use OnTime for tracking 
Help Desk incidents - even 
monitor email accounts 
to generate help tickets. 

Notifications 

Ensure team members are 
in synch with automatic 
email notifications and 
alerts, 

at oxosoft.com 
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dev teams worldwide 



